In the Linux kernel, the following vulnerability has been resolved:
mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
In the `mac802154_scan_worker` function, the `scan_req->type` field was accessed after the RCU read-side critical section was unlocked. According to RCU usage rules, this is illegal and can lead to unpredictable behavior, such as accessing memory that has been updated or causing use-after-free issues.
This possible bug was identified using a static analysis tool developed by myself, specifically designed to detect RCU-related issues.
To address this, the `scan_req->type` value is now stored in a local variable `scan_req_type` while still within the RCU read-side critical section. The `scan_req_type` is then used after the RCU lock is released, ensuring that the type value is safely accessed without violating RCU rules.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1024-gcp | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub