CVE-2026-72047

A flaw was found in the Linux kernel's ieee802154 ca8210 driver. On 64-bit systems, a pointer truncation vulnerability occurs during internal buffer operations. This issue causes only a partial pointer to be written, leading to an uninitialized upper portion when read back. Consequently, the system may attempt to access an arbitrary kernel memory address, which typically results in a kernel crash (Denial of Service). A local attacker might be able to leverage this to achieve privilege escalation.

This vulnerability is rated with a Moderate severity because exploitation requires local access and relies on optional debugfs test interfaces for specialized IEEE 802.15.4 wireless transceiver hardware. In standard Red Hat Enterprise Linux installations, the affected driver code and associated debugfs configuration are not enabled by default, preventing typical environments from being exposed. Even where the driver is present, triggering the flaw demands local privileges on 64-bit architectures, primarily resulting in kernel crash and denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.