CVE-2026-98194

A flaw was found in the Linux kernel's Libertas TF wireless driver. During device cleanup, the driver releases command memory buffers before stopping the associated timer callback. This timing issue creates a use-after-free condition where an active timer callback accesses released memory, allowi...

PT-2026-106523

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas tf: fix UAF in lbtf free adapter lbtf free adapter calls lbtf free cmd buffer to free the command buffers before calling timer delete sync to wait for the command timer callback. If the timer callback command timer...

PT-2018-2821

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the Linux kernel's implementation of the if usb probe handler in the libertas tf usb.ko module. An attacker can exploit this by connecting a...