Use-after-free in Linux kernel - CVE-2026-99134

Vulnerability details

The vulnerability allows a remote attacker on the local network to cause a denial of service and corrupt association results in the Linux kernel.

The vulnerability exists due to unsynchronized access to the coordinator pointer and association results in mac802154 when processing association responses concurrently with association cleanup. A remote attacker on the local network can send carefully timed association responses to trigger a NULL pointer dereference or use-after-free, potentially crashing the kernel, or send a second response to leave the caller with an inconsistent status and address pair.

Affected software

How to mitigate CVE-2026-99134

External References

• https://git.kernel.org/stable/c/3cdd8b1abddebbae2582e90294c77b61d5f5aee7
• https://git.kernel.org/stable/c/a585901bb8cd2cd60d678be8a56ca6a4e1a6946c
• https://git.kernel.org/stable/c/c037915f80c4db47f7d061d68e703ffd551b1a34

Related Security Bulletins

• Use-after-free in Linux kernel mac802154
• Debian update for linux