SB20261029179 - Use-after-free in Linux kernel mac802154

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-99134)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker on the local network to cause a denial of service and corrupt association results in the Linux kernel.

The vulnerability exists due to unsynchronized access to the coordinator pointer and association results in mac802154 when processing association responses concurrently with association cleanup. A remote attacker on the local network can send carefully timed association responses to trigger a NULL pointer dereference or use-after-free, potentially crashing the kernel, or send a second response to leave the caller with an inconsistent status and address pair.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3cdd8b1abddebbae2582e90294c77b61d5f5aee7
• https://git.kernel.org/stable/c/a585901bb8cd2cd60d678be8a56ca6a4e1a6946c
• https://git.kernel.org/stable/c/c037915f80c4db47f7d061d68e703ffd551b1a34