CVE-2024-50005

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A potential RCU dereference issue was identified in the mac802154 scan worker function. The scan req->type field was accessed after the RCU read-side critical section was unlocked, which is against RCU usage rules and can lead to unpredictable behavior, such as accessing memory that has been updated or causing use-after-free issues. This issue was detected using a static analysis tool designed to detect RCU-related problems. To fix this, the scan req->type value is now stored in a local variable scan req type while still within the RCU read-side critical section, ensuring safe access to the type value without violating RCU rules.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.