CVE-2024-50005

mac802154: Fix potential RCU dereference issue in mac802154_scan_worker

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mac802154: Fix potential RCU dereference issue in mac802154_scan_worker

In the `mac802154_scan_worker` function, the `scan_req->type` field was

accessed after the RCU read-side critical section was unlocked. According

to RCU usage rules, this is illegal and can lead to unpredictable

behavior, such as accessing memory that has been updated or causing

use-after-free issues.

This possible bug was identified using a static analysis tool developed

by myself, specifically designed to detect RCU-related issues.

To address this, the `scan_req->type` value is now stored in a local

variable `scan_req_type` while still within the RCU read-side critical

section. The `scan_req_type` is then used after the RCU lock is released,

ensuring that the type value is safely accessed without violating RCU

rules.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00221 · 12.0th percentile
Published
2024-10-21T18:53Z
EPSS history
Timeline
  • 21 OCT 18:53Z
    mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
    cvelistv5