Impact
The MACB driver in the Linux kernel contains a flaw where it frees pending transmission buffers (SKBs) without verifying their completion status when the driver is closed. This results in kernel memory corruption that can destabilize the system or potentially allow an attacker to execute arbitrary code if the corruption is successfully leveraged.
Affected Systems
All Linux kernel releases that load the macb driver are affected, as the vulnerability stems from the generic MACB network driver. The specific kernel versions are not enumerated in the provided data, so any kernel supporting the macb driver before the applied patch is at risk. The MACB driver is used primarily in embedded systems that include the Linux kernel module for Media Access Control Bus support.
Risk and Exploitability
The CVSS score is not published, but the EPSS indicates a less than 1% exploitation probability, and the vulnerability is not listed in CISA's KEV catalogue. The flaw requires the driver to be closed or the module unloaded while transmission queues remain populated—an operation typically performed by a user with root privileges. Therefore the attack vector is likely local privilege escalation and the risk of compromise is low, but the failure can cause kernel crashes or system instability.
OpenCVE Enrichment