CVE-2026-68410

A flaw was found in the Linux kernel's Libertas Wi-Fi driver. The helper_firmware_cb() function neglects to free a single-stage firmware image after a successful asynchronous load. This leads to a memory leak in the USB firmware-download path. This issue could potentially lead to system instability or a denial of service (DoS) due to resource exhaustion.

This issue affects Libertas Wi-Fi (USB firmware path). helper_firmware_cb() leaks firmware image after successful async load. Systems without libertas hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the libertas module from loading. See https://access.redhat.com/solutions/41278 for instructions.