Lucene search
+L

5 matches found

NVD
NVD
•added 2026/10/06 9:18 a.m.•6 views

CVE-2026-98194

In the Linux kernel, the following vulnerability has been resolved: wifi: libertastf: fix UAF in lbtffreeadapter lbtffreeadapter calls lbtffreecmdbuffer to free the command buffers before calling timerdeletesync to wait for the command timer callback. If the timer callback commandtimerfn is alrea...

0.00184EPSS
SaveExploits0References8
OSV
OSV
•added 2026/10/06 9:18 a.m.•3 views

UBUNTU-CVE-2026-98194

In the Linux kernel, the following vulnerability has been resolved: wifi: libertastf: fix UAF in lbtffreeadapter lbtffreeadapter calls lbtffreecmdbuffer to free the command buffers before calling timerdeletesync to wait for the command timer callback. If the timer callback commandtimerfn is alrea...

6.2AI score0.00184EPSS
SaveExploits0References11
OSV
OSV
•added 2026/10/06 8:44 a.m.•4 views

CVE-2026-98194 wifi: libertas_tf: fix UAF in lbtf_free_adapter()

In the Linux kernel, the following vulnerability has been resolved: wifi: libertastf: fix UAF in lbtffreeadapter lbtffreeadapter calls lbtffreecmdbuffer to free the command buffers before calling timerdeletesync to wait for the command timer callback. If the timer callback commandtimerfn is alrea...

6.2AI score
SaveExploits0References11
CVE
CVE
•added 2026/10/06 8:44 a.m.•7 views

CVE-2026-98194

A Use-After-Free (UAF) vulnerability exists in the Linux kernel within the wifi: libertas_tf component. The issue is caused by the lbtf_free_adapter() function calling lbtf_free_cmd_buffer() to free command buffers before executing timer_delete_sync(). If the command_timer_fn callback is active d...

6.2AI score0.00184EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-98194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libertastf: fix UAF in lbtffreeadapter lbtffreeadapter calls lbtffreecmdbuffer to free the command buffers before calling timerdeletesync to wait for the...

6.2AI score0.00184EPSS
SaveExploits0References3
Rows per page
Query Builder