CVE-2026-74661

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mac802154: fix netdev use-after-free in beacon worker<br /> <br /> mac802154_beacon_worker() reads local-&gt;beacon_req under RCU and derives<br /> the sub-interface from the request, but then drops the RCU read lock and<br /> continues to use both sdata and the embedded wpan_dev.<br /> <br /> mac802154_stop_beacons_locked() cancels only pending beacon work, clears<br /> local-&gt;beacon_req and frees the request. A beacon worker that is already<br /> running can therefore continue after interface teardown and dereference<br /> the freed netdev private area.<br /> <br /> The scan worker already pins the netdev before leaving RCU. Apply the<br /> same lifetime rule to the beacon worker: take a netdev reference while<br /> the request is still protected by RCU, and release it on all paths that<br /> continue after the reference is acquired.