https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 16:33:25 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74661 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mac802154: fix netdev use-after-free in beacon worker</p> <p>mac802154_beacon_worker() reads local-&gt;beacon_req under RCU and derives the sub-interface from the request, but then drops the RCU read lock and continues to use both sdata and the embedded wpan_dev.</p> <p>mac802154_stop_beacons_locked() cancels only pending beacon work, clears local-&gt;beacon_req and frees the request. A beacon worker that is already running can therefore continue after interface teardown and dereference the freed netdev private area.</p> <p>The scan worker already pins the netdev before leaving RCU. Apply the same lifetime rule to the beacon worker: take a netdev reference while the request is still protected by RCU, and release it on all paths that continue after the reference is acquired.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mac802154: fix netdev use-after-free in beacon worker</p> <p>mac802154_beacon_worker() reads local-&gt;beacon_req under RCU and derives the sub-interface from the request, but then drops the RCU read lock and continues to use both sdata and the embedded wpan_dev.</p> <p>mac802154_stop_beacons_locked() cancels only pending beacon work, clears local-&gt;beacon_req and frees the request. A beacon worker that is already running can therefore continue after interface teardown and dereference the freed netdev private area.</p> <p>The scan worker already pins the netdev before leaving RCU. Apply the same lifetime rule to the beacon worker: take a netdev reference while the request is still protected by RCU, and release it on all paths that continue after the reference is acquired.</p> https://vulnerability.circl.lu/vuln/cve-2026-74661