In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local->interfaces under RCU. The bulk hardware teardown path removes entries with list_del(), so an asynchronous transmit completion can follow a poisoned list node in ieee802154_wake_queue(). Use list_del_rcu() as in the single-interface removal path. The following unregister_netdevice() waits for in-flight RCU readers before freeing the netdevice, so no separate grace-period wait is needed.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/2039f27b1a0c997137a5de7f8a3cee0e80fbf952 cve-icon cve-icon
https://git.kernel.org/stable/c/4bf231f459b542414629b64f63d5cad6701bd07c cve-icon cve-icon
https://git.kernel.org/stable/c/539dfcf69105d8d3d4d677b71de6e5ede2e6dfa0 cve-icon cve-icon
https://git.kernel.org/stable/c/72ac5af9ad09662bd0ea91cb8845d490c8ef9c01 cve-icon cve-icon
https://git.kernel.org/stable/c/77caf2d6eba7cb94a7ecd7b369a5974fd7d7c054 cve-icon cve-icon
https://git.kernel.org/stable/c/b91e5248dd7af09b500879a46d22a36b60db3a57 cve-icon cve-icon
https://git.kernel.org/stable/c/c7c031b75218b3ba3014a0f6b9849888994528d6 cve-icon cve-icon
https://git.kernel.org/stable/c/d8b5b66388a51febe4b8505b0ecd9da15b4ba639 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local->interfaces under RCU. The bulk hardware teardown path removes entries with list_del(), so an asynchronous transmit completion can follow a poisoned list node in ieee802154_wake_queue(). Use list_del_rcu() as in the single-interface removal path. The following unregister_netdevice() waits for in-flight RCU readers before freeing the netdevice, so no separate grace-period wait is needed.
Title mac802154: remove interfaces with RCU list deletion
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:51:49.270Z

Reserved: 2026-08-09T03:40:39.900Z

Link: CVE-2026-72024

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:01.440

Modified: 2026-08-15T06:21:01.440

Link: CVE-2026-72024

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.