-

CVE-2026-68410

wifi: libertas: fix memory leak in helper_firmware_cb()

In the Linux kernel, the following vulnerability has been resolved:

wifi: libertas: fix memory leak in helper_firmware_cb()

helper_firmware_cb() neglects to free the single-stage firmware image
after a successful async load, leading to a memory leak in the USB
firmware-download path.

Fix this memory leak by calling release_firmware() immediately after
lbs_fw_loaded() returns.

The bug was first flagged by an experimental analysis tool we are
developing for kernel memory-management bugs while analyzing
v6.13-rc1. The tool is still under development and is not yet publicly
available. Manual inspection confirms that the bug is still present in
the current wireless tree.

An x86_64 allyesconfig build showed no new warnings. As we do not have
compatible Libertas USB hardware for exercising this firmware-download
path, no runtime testing was able to be performed.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1dfba3060fe7ee03ccec25a91d35085142dfc295
Version < 6c1f54a04813676c5a2150d99331c8d21f199374
Status affected
Version 1dfba3060fe7ee03ccec25a91d35085142dfc295
Version < 7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06
Status affected
Version 1dfba3060fe7ee03ccec25a91d35085142dfc295
Version < ce829286f4935f1eb6b5dcb64da02910ce149c76
Status affected
Version 1dfba3060fe7ee03ccec25a91d35085142dfc295
Version < d497b7566e74920acfe283dd6b2cbf1682890796
Status affected
Version 1dfba3060fe7ee03ccec25a91d35085142dfc295
Version < eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55c
Status affected
Version 1dfba3060fe7ee03ccec25a91d35085142dfc295
Version < 6cda91bbb8dc3d22ef0323008a12dcf73a5129da
Status affected
Version 1dfba3060fe7ee03ccec25a91d35085142dfc295
Version < 644640cde2fb216e6567de5eee780a38dbc95928
Status affected
Version 1dfba3060fe7ee03ccec25a91d35085142dfc295
Version < 63c2391deefb31e1b801b7f32bd502ca4808639b
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.13
Status affected
Version 0
Version < 3.13
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.116
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d497b7566e74920acfe283dd6b2cbf1682890796
https://git.kernel.org/stable/c/eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55c
https://git.kernel.org/stable/c/6cda91bbb8dc3d22ef0323008a12dcf73a5129da
https://git.kernel.org/stable/c/644640cde2fb216e6567de5eee780a38dbc95928
https://git.kernel.org/stable/c/63c2391deefb31e1b801b7f32bd502ca4808639b
https://git.kernel.org/stable/c/6c1f54a04813676c5a2150d99331c8d21f199374
https://git.kernel.org/stable/c/7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06
https://git.kernel.org/stable/c/ce829286f4935f1eb6b5dcb64da02910ce149c76