CVE-2026-72070

In the Linux kernel, the following vulnerability has been resolved: wifi: libertastf: fix use-after-free in lbtffreeadapter lbtffreeadapter calls timerdelete&priv-commandtimer, which does not wait for a running commandtimerfn callback. lbtffreeadapter runs on the teardown path right before...

CVE-2026-72070

In the Linux kernel, the following vulnerability has been resolved: wifi: libertastf: fix use-after-free in lbtffreeadapter lbtffreeadapter calls timerdelete&priv-commandtimer, which does not wait for a running commandtimerfn callback. lbtffreeadapter runs on the teardown path right before...

UBUNTU-CVE-2026-72070

In the Linux kernel, the following vulnerability has been resolved: wifi: libertastf: fix use-after-free in lbtffreeadapter lbtffreeadapter calls timerdelete&priv-commandtimer, which does not wait for a running commandtimerfn callback. lbtffreeadapter runs on the teardown path right before...

CVE-2026-72070 wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()

In the Linux kernel, the following vulnerability has been resolved: wifi: libertastf: fix use-after-free in lbtffreeadapter lbtffreeadapter calls timerdelete&priv-commandtimer, which does not wait for a running commandtimerfn callback. lbtffreeadapter runs on the teardown path right before...

CVE-2026-72070

CVE-2026-72070 affects the Linux kernel driver for libertas_tf (wifi) and describes a use-after-free in lbtf_free_adapter(). The issue arises because lbtf_free_adapter() calls timer_delete(&priv->command_timer) in teardown, which does not wait for an in-flight command_timer_fn() callback that ...

UBUNTU-CVE-2026-23281

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbsfreeadapter The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before the structure is freed. This is incorrect because timerdelete does n...

CVE-2026-23281 wifi: libertas: fix use-after-free in lbs_free_adapter()

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbsfreeadapter The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before the structure is freed. This is incorrect because timerdelete does n...

The vulnerability of the timer_delete_sync() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the timerdeletesync function in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2025-39859 ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix use-after-free bugs causing by ptpocpwatchdog The ptpocpdetach only shuts down the watchdog timer if it is pending. However, if the timer handler is already running, the timerdeletesync is not called. This leads to...