CVE-2026-68198

The CVE describes a use-after-free in Linux kernel ath6kl wifi (aggr_reset_state) related to the non-synchronous timer_delete() used for the aggregation timer. If the aggr_timeout callback is running when aggr_reset_state() executes, it may access aggr_conn fields (e.g., rx_tid, stat) that can be...