CVE-2026-68410

wifi: libertas: fix memory leak in helper_firmware_cb()

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: libertas: fix memory leak in helper_firmware_cb()

helper_firmware_cb() neglects to free the single-stage firmware image after a successful async load, leading to a memory leak in the USB firmware-download path.

Fix this memory leak by calling release_firmware() immediately after lbs_fw_loaded() returns.

The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in the current wireless tree.

An x86_64 allyesconfig build showed no new warnings. As we do not have compatible Libertas USB hardware for exercising this firmware-download path, no runtime testing was able to be performed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 6c1f54a04813676c5a2150d99331c8d21f199374Affected 1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06Affected 1dfba3060fe7ee03ccec25a91d35085142dfc295 to before ce829286f4935f1eb6b5dcb64da02910ce149c76Affected 1dfba3060fe7ee03ccec25a91d35085142dfc295 to before d497b7566e74920acfe283dd6b2cbf1682890796Affected 1dfba3060fe7ee03ccec25a91d35085142dfc295 to before eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55cAffected 1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 6cda91bbb8dc3d22ef0323008a12dcf73a5129daAffected 1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 644640cde2fb216e6567de5eee780a38dbc95928Affected 1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 63c2391deefb31e1b801b7f32bd502ca4808639bAffected
LinuxLinux	3.13Affected before 3.13Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 6c1f54a04813676c5a2150d99331c8d21f199374Affected
1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06Affected
1dfba3060fe7ee03ccec25a91d35085142dfc295 to before ce829286f4935f1eb6b5dcb64da02910ce149c76Affected
1dfba3060fe7ee03ccec25a91d35085142dfc295 to before d497b7566e74920acfe283dd6b2cbf1682890796Affected
1dfba3060fe7ee03ccec25a91d35085142dfc295 to before eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55cAffected
1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 6cda91bbb8dc3d22ef0323008a12dcf73a5129daAffected
1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 644640cde2fb216e6567de5eee780a38dbc95928Affected
1dfba3060fe7ee03ccec25a91d35085142dfc295 to before 63c2391deefb31e1b801b7f32bd502ca4808639bAffected

LinuxLinux

3.13Affected
before 3.13Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.