CVE-2026-68198

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. A use-after-free vulnerability exists within the aggr_reset_state() function. This occurs because a non-synchronous timer deletion allows a timer callback (aggr_timeout) to access memory that has already been freed, creating a race condition. An attacker could potentially exploit this to cause system instability or a denial of service.

This is a use-after-free flaw in the ath6kl Wi-Fi driver of the Linux kernel. This vulnerability could allow a local attacker to cause a denial of service by triggering a race condition in the aggregation state reset function. Exploitation requires the presence and active use of specific Qualcomm Atheros wireless hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.