CVE-2026-68198

The CVE describes a use-after-free in Linux kernel ath6kl wifi (aggr_reset_state) related to the non-synchronous timer_delete() used for the aggregation timer. If the aggr_timeout callback is running when aggr_reset_state() executes, it may access aggr_conn fields (e.g., rx_tid, stat) that can be...

EUVD-2026-55299

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix use-after-free in aggrresetstate The aggrresetstate function uses timerdelete non-synchronous for the aggregation timer before proceeding to delete TID state and before the structure is freed by callers like...