CVE-2026-72024: mac802154: remove interfaces with RCU list deletion
In the Linux kernel, the following vulnerability has been resolved:
mac802154: remove interfaces with RCU list deletion
Queue wake, stop, and disable paths walk local->interfaces under RCU. The bulk hardware teardown path removes entries with listdel(), so an asynchronous transmit completion can follow a poisoned list node in ieee802154wakequeue().
Use listdelrcu() as in the single-interface removal path. The following unregisternetdevice() waits for in-flight RCU readers before freeing the netdevice, so no separate grace-period wait is needed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72024?
CVE-2026-72024 has a risk score of 38, indicating it is a low severity vulnerability.
How do I fix CVE-2026-72024?
To fix CVE-2026-72024, update to the latest version of the Linux kernel where this vulnerability has been addressed.
What systems are affected by CVE-2026-72024?
CVE-2026-72024 affects systems running vulnerable versions of the Linux kernel with the mac802154 subsystem.
What are the potential implications of CVE-2026-72024?
The implications of CVE-2026-72024 could lead to instability in network operations for devices using the affected kernel.
When was CVE-2026-72024 published?
CVE-2026-72024 was published on August 15, 2026.