In the Linux kernel, the following vulnerability has been resolved:
mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
In the `mac802154_scan_worker` function, the `scan_req->type` field was accessed after the RCU read-side critical section was unlocked. According to RCU usage rules, this is illegal and can lead to unpredictable behavior, such as accessing memory that has been updated or causing use-after-free issues.
This possible bug was identified using a static analysis tool developed by myself, specifically designed to detect RCU-related issues.
To address this, the `scan_req->type` value is now stored in a local variable `scan_req_type` while still within the RCU read-side critical section. The `scan_req_type` is then used after the RCU lock is released, ensuring that the type value is safely accessed without violating RCU rules.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-awsUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub