CVE-2022-48972

A flaw was found in the Linux kernel's mac802154 subsystem. A local attacker with low privileges could trigger a null pointer dereference by failing to initialize a list within the ieee802154_if_add() function. This vulnerability could lead to a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If IEEE 802.15.4 wireless communication is not required, prevent the mac802154 kernel module from loading by blacklisting it.

To blacklist the module, create a file named /etc/modprobe.d/blacklist-mac802154.conf with the following content:

blacklist mac802154

After creating the file, a system reboot or a reload of kernel modules is required for the change to take effect. This mitigation may impact functionality that relies on IEEE 802.15.4 devices.