CVE-2026-68125

A flaw was found in the Linux kernel's mac802154 component. A remote attacker, within radio range, could send a specially crafted IEEE 802.15.4 frame with a payload shorter than its authentication tag. This incorrect frame processing can lead to an out-of-bounds read during cryptographic operations, causing a general-protection fault and resulting in a denial of service (DoS).

This vulnerability is rated as Moderate severity because exploitation requires an active IEEE 802.15.4 wireless interface and physical proximity within radio frequency range. Standard Red Hat Enterprise Linux server environments typically lack 802.15.4 hardware, significantly reducing the practical attack surface. In environments where low-rate wireless personal area network transceivers are present and configured with link-layer security, an adjacent attacker could trigger a kernel crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.