The flaw occurs when the mac802154 driver removes network interfaces using list_del() instead of the RCU‑safe list_del_rcu(). This misuse can leave a freed list node reachable by an asynchronous transmit completion, which may cause kernel memory corruption and potentially lead to a kernel panic. The issue is a synchronization error, identified by CWE‑362, and an improper deallocation leading to a use‑after‑free, reflected by CWE‑825, without explicit privilege escalation.

All Linux kernel versions that include the mac802154 driver and have not incorporated the referenced fix commits are affected. The flaw applies to any generic Linux kernel build that creates and deletes IEEE 802.15.4 wireless interfaces, regardless of vendor.

The CVSS score of 7.8 indicates high severity, while the EPSS score of < 1 % suggests that exploitation is unlikely. The vulnerability is not listed in CISA KEV. Based on the description, the likely attack vector requires creating and deleting mac802154 interfaces, implying local or privileged access. While no public exploits are reported, the risk of kernel crash remains significant.