SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-72024

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's mac802154 subsystem, specifically related to the handling of interfaces during hardware teardown. An attacker could exploit this flaw to cause a denial of service by triggering an asynchronous transmit completion that follows a corrupted list node, potentially leading to system instability. Organizations using Linux systems with the mac802154 protocol should prioritize patching this vulnerability to mitigate risks associated with network reliability and performance.

CVE
CVE-2026-72024
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local->interfaces under RCU. The bulk hardware teardown path removes entries with list_del(), so an asynchronous transmit completion can follow a poisoned list node in ieee802154_wake_queue(). Use list_del_rcu() as in the single-interface removal path. The following unregister_netdevice() waits for in-flight RCU readers before freeing the netdevice, so no separate grace-period wait is needed.