In the Linux kernel, the following vulnerability has been resolved:
mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
In the `mac802154_scan_worker` function, the `scan_req->type` field was accessed after the RCU read-side critical section was unlocked. According to RCU usage rules, this is illegal and can lead to unpredictable behavior, such as accessing memory that has been updated or causing use-after-free issues.
This possible bug was identified using a static analysis tool developed by myself, specifically designed to detect RCU-related issues.
To address this, the `scan_req->type` value is now stored in a local variable `scan_req_type` while still within the RCU read-side critical section. The `scan_req_type` is then used after the RCU lock is released, ensuring that the type value is safely accessed without violating RCU rules.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1006-gkeop | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub