CVE-2026-72024

A flaw was found in the mac802154 component of the Linux kernel. When network interfaces are removed, the system incorrectly manages memory, which can cause a program to try and use memory that is no longer available or has been corrupted. This vulnerability could lead to system instability or a denial of service, making the affected system unresponsive.

This vulnerability is rated as Moderate impact because exploitation requires local access, relies on the presence of specialized IEEE 802.15.4 wireless networking hardware or emulated devices, and solely results in a denial of service. The flaw occurs during concurrent network interface removal and asynchronous transmission completion, which can trigger a kernel crash. Standard Red Hat Enterprise Linux environments do not configure or utilize IEEE 802.15.4 interfaces by default, substantially reducing exposure on typical deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.