{"id":"CVE-2024-50005","summary":"mac802154: Fix potential RCU dereference issue in mac802154_scan_worker","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: Fix potential RCU dereference issue in mac802154_scan_worker\n\nIn the `mac802154_scan_worker` function, the `scan_req-\u003etype` field was\naccessed after the RCU read-side critical section was unlocked. According\nto RCU usage rules, this is illegal and can lead to unpredictable\nbehavior, such as accessing memory that has been updated or causing\nuse-after-free issues.\n\nThis possible bug was identified using a static analysis tool developed\nby myself, specifically designed to detect RCU-related issues.\n\nTo address this, the `scan_req-\u003etype` value is now stored in a local\nvariable `scan_req_type` while still within the RCU read-side critical\nsection. The `scan_req_type` is then used after the RCU lock is released,\nensuring that the type value is safely accessed without violating RCU\nrules.","modified":"2026-04-02T12:21:12.527595Z","published":"2024-10-21T18:53:59.259Z","related":["MGASA-2024-0344","MGASA-2024-0345","USN-7276-1","USN-7277-1","openSUSE-SU-2024:14500-1","openSUSE-SU-2025:14705-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50005.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/540138377b22f601f06f55ebfa3ca171dcab471a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bff1709b3980bd7f80be6786f64cc9a9ee9e56da"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d18f669461811dfe2915d5554ab2a9834f810013"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e676e4ea76bbe7f1156d8c326b9b6753849481c2"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50005.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50005"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8"},{"fixed":"e676e4ea76bbe7f1156d8c326b9b6753849481c2"},{"fixed":"540138377b22f601f06f55ebfa3ca171dcab471a"},{"fixed":"d18f669461811dfe2915d5554ab2a9834f810013"},{"fixed":"bff1709b3980bd7f80be6786f64cc9a9ee9e56da"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50005.json"}}],"schema_version":"1.7.5"}