CVE-2026-72070

A flaw was found in the Linux kernel's libertas_tf Wi-Fi driver. This vulnerability is a use-after-free, meaning the system attempts to access memory after it has been released. This occurs when the lbtf_free_adapter() function, responsible for freeing adapter resources, does not properly synchronize with a timer callback during device removal. An attacker could potentially exploit this timing issue to cause system instability, leading to a denial of service, or in some cases, execute unauthorized code.

This vulnerability is rated as Moderate because exploitation requires local access alongside interaction with specific Marvell Libertas 802.11 wireless hardware, limiting the attack surface to systems utilizing these specialized devices. A race during hardware detachment or failed probe handling can lead to a use-after-free, resulting in kernel instability and a local denial of service. Default installations of Red Hat Enterprise Linux do not enable or ship this legacy wireless driver, leaving standard enterprise configurations unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.