CVE-2026-72024

Received Received - Intake

mac802154 Interface Use-After-Free in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local->interfaces under RCU. The bulk hardware teardown path removes entries with list_del(), so an asynchronous transmit completion can follow a poisoned list node in ieee802154_wake_queue(). Use list_del_rcu() as in the single-interface removal path. The following unregister_netdevice() waits for in-flight RCU readers before freeing the netdevice, so no separate grace-period wait is needed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72024

EUVD

EUVD-2026-58982

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of network interfaces during removal. The issue occurs when the mac802154 subsystem removes interfaces using list_del() instead of list_del_rcu() while other operations like queue wake or transmit completion are still in progress. This can lead to accessing a poisoned list node, causing potential system instability or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's mac802154 subsystem and involves improper list handling during interface removal. Detection requires checking kernel logs for related errors or examining the kernel version for affected releases. Commands like dmesg, journalctl -k, or checking uname -a may help identify if the vulnerable code path is present.

Impact Analysis

If exploited, this vulnerability could cause system crashes, data corruption, or denial of service by disrupting wireless network operations. Systems relying on IEEE 802.15.4 wireless interfaces (e.g., IoT devices) may experience instability or unexpected behavior during interface removal or hardware teardown.

Compliance Impact

This vulnerability affects the Linux kernel's mac802154 subsystem, which is related to IEEE 802.15.4 wireless communication. It does not directly impact compliance with GDPR or HIPAA, as those standards focus on data protection and privacy rather than kernel-level wireless communication issues.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. Monitor kernel security advisories for updates to the mac802154 subsystem. If immediate patching is not possible, restrict access to affected systems or disable the mac802154 module if not required.

Hi! I’m here to help you understand CVE-2026-72024. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70