CVE-2026-74661

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the mac802154 beacon worker() function. The function reads local->beacon req under RCU (Read-Copy-Update, a synchronization mechanism) and derives the sub-interface from the request, but it drops the RCU read lock while continuing to use sdata and the embedded wpan dev. Because mac802154 stop beacons locked() only cancels pending beacon work and frees the request, a worker already in execution can continue after interface teardown and dereference the freed netdev private area.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.