CVE-2026-98194

A flaw was found in the Linux kernel's Libertas TF wireless driver. During device cleanup, the driver releases command memory buffers before stopping the associated timer callback. This timing issue creates a use-after-free condition where an active timer callback accesses released memory, allowing a local user to trigger a kernel crash resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.