Use-after-free in Linux kernel - CVE-2026-74661

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free in mac802154_beacon_worker when processing beacon work after interface teardown. A local user can trigger beacon worker activity and interface teardown to cause a denial of service.

The issue occurs because the worker continues to use a sub-interface and embedded wpan_dev after the RCU read-side critical section has ended and the request has been freed.

Affected software

How to mitigate CVE-2026-74661

External References

• https://git.kernel.org/stable/c/5f26a690e8efa54315e4922368daf54e0b8f5515
• https://git.kernel.org/stable/c/9d067e581597c462c51fee8a30b51bc48a68c4e1
• https://git.kernel.org/stable/c/e5fb0e03bc7f45508c182a427357bf6b389a9033
• https://git.kernel.org/stable/c/e6cd416a899edc912b428c4ba399bd73f516cb31
• https://git.kernel.org/stable/c/fe820dcc1d8ff77783a9d2bcc93b98c99ac6d517

Related Security Bulletins

• Use-after-free in Linux kernel mac802154
• Debian update for linux