CVE-2026-72024

mac802154: remove interfaces with RCU list deletion

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 19, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mac802154: remove interfaces with RCU list deletion

Queue wake, stop, and disable paths walk local->interfaces under RCU. The bulk hardware teardown path removes entries with list_del(), so an asynchronous transmit completion can follow a poisoned list node in ieee802154_wake_queue().

Use list_del_rcu() as in the single-interface removal path. The following unregister_netdevice() waits for in-flight RCU readers before freeing the netdevice, so no separate grace-period wait is needed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	592dfbfc72f5352437c883aa11ab579d10cdb595 to before 72ac5af9ad09662bd0ea91cb8845d490c8ef9c01Affected 592dfbfc72f5352437c883aa11ab579d10cdb595 to before 2039f27b1a0c997137a5de7f8a3cee0e80fbf952Affected 592dfbfc72f5352437c883aa11ab579d10cdb595 to before 4bf231f459b542414629b64f63d5cad6701bd07cAffected 592dfbfc72f5352437c883aa11ab579d10cdb595 to before b91e5248dd7af09b500879a46d22a36b60db3a57Affected 592dfbfc72f5352437c883aa11ab579d10cdb595 to before c7c031b75218b3ba3014a0f6b9849888994528d6Affected 592dfbfc72f5352437c883aa11ab579d10cdb595 to before 77caf2d6eba7cb94a7ecd7b369a5974fd7d7c054Affected 592dfbfc72f5352437c883aa11ab579d10cdb595 to before d8b5b66388a51febe4b8505b0ecd9da15b4ba639Affected 592dfbfc72f5352437c883aa11ab579d10cdb595 to before 539dfcf69105d8d3d4d677b71de6e5ede2e6dfa0Affected
LinuxLinux	3.19Affected before 3.19Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

592dfbfc72f5352437c883aa11ab579d10cdb595 to before 72ac5af9ad09662bd0ea91cb8845d490c8ef9c01Affected
592dfbfc72f5352437c883aa11ab579d10cdb595 to before 2039f27b1a0c997137a5de7f8a3cee0e80fbf952Affected
592dfbfc72f5352437c883aa11ab579d10cdb595 to before 4bf231f459b542414629b64f63d5cad6701bd07cAffected
592dfbfc72f5352437c883aa11ab579d10cdb595 to before b91e5248dd7af09b500879a46d22a36b60db3a57Affected
592dfbfc72f5352437c883aa11ab579d10cdb595 to before c7c031b75218b3ba3014a0f6b9849888994528d6Affected
592dfbfc72f5352437c883aa11ab579d10cdb595 to before 77caf2d6eba7cb94a7ecd7b369a5974fd7d7c054Affected
592dfbfc72f5352437c883aa11ab579d10cdb595 to before d8b5b66388a51febe4b8505b0ecd9da15b4ba639Affected
592dfbfc72f5352437c883aa11ab579d10cdb595 to before 539dfcf69105d8d3d4d677b71de6e5ede2e6dfa0Affected

LinuxLinux

3.19Affected
before 3.19Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.