CVE-2026-98890

The Linux kernel contains a vulnerability in the libertas wifi driver. Specifically, in monitor mode, the function lbs_hard_start_xmit() fails to perform sufficient length checks when casting skb->data to a radiotap TX header . Because the generic check only rejects zero-length or oversized sk...

EUVD-2026-108684

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX frames In monitor mode, lbshardstartxmit casts skb-data to a radiotap TX header, skips that header, and then copies the 802.11 destination address from offset 4 in the remaining frame. The...