{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"6c1f54a04813676c5a2150d99331c8d21f199374","status":"affected","version":"1dfba3060fe7ee03ccec25a91d35085142dfc295","versionType":"git"},{"lessThan":"7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06","status":"affected","version":"1dfba3060fe7ee03ccec25a91d35085142dfc295","versionType":"git"},{"lessThan":"ce829286f4935f1eb6b5dcb64da02910ce149c76","status":"affected","version":"1dfba3060fe7ee03ccec25a91d35085142dfc295","versionType":"git"},{"lessThan":"d497b7566e74920acfe283dd6b2cbf1682890796","status":"affected","version":"1dfba3060fe7ee03ccec25a91d35085142dfc295","versionType":"git"},{"lessThan":"eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55c","status":"affected","version":"1dfba3060fe7ee03ccec25a91d35085142dfc295","versionType":"git"},{"lessThan":"6cda91bbb8dc3d22ef0323008a12dcf73a5129da","status":"affected","version":"1dfba3060fe7ee03ccec25a91d35085142dfc295","versionType":"git"},{"lessThan":"644640cde2fb216e6567de5eee780a38dbc95928","status":"affected","version":"1dfba3060fe7ee03ccec25a91d35085142dfc295","versionType":"git"},{"lessThan":"63c2391deefb31e1b801b7f32bd502ca4808639b","status":"affected","version":"1dfba3060fe7ee03ccec25a91d35085142dfc295","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"3.13"},{"lessThan":"3.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.265","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.216","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.183","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.148","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-68410","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: libertas: fix memory leak in helper_firmware_cb()\n\nhelper_firmware_cb() neglects to free the single-stage firmware image\nafter a successful async load, leading to a memory leak in the USB\nfirmware-download path.\n\nFix this memory leak by calling release_firmware() immediately after\nlbs_fw_loaded() returns.\n\nThe bug was first flagged by an experimental analysis tool we are\ndeveloping for kernel memory-management bugs while analyzing\nv6.13-rc1. The tool is still under development and is not yet publicly\navailable. Manual inspection confirms that the bug is still present in\nthe current wireless tree.\n\nAn x86_64 allyesconfig build showed no new warnings. As we do not have\ncompatible Libertas USB hardware for exercising this firmware-download\npath, no runtime testing was able to be performed.","epss":{"date":"2026-11-06","percentile":0.12138,"score":0.00216},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985572120,"publishedAt":1786363470194,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6c1f54a04813676c5a2150d99331c8d21f199374"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ce829286f4935f1eb6b5dcb64da02910ce149c76"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d497b7566e74920acfe283dd6b2cbf1682890796"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55c"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6cda91bbb8dc3d22ef0323008a12dcf73a5129da"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/644640cde2fb216e6567de5eee780a38dbc95928"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/63c2391deefb31e1b801b7f32bd502ca4808639b"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/63c2391deefb31e1b801b7f32bd502ca4808639b"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/644640cde2fb216e6567de5eee780a38dbc95928"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/6c1f54a04813676c5a2150d99331c8d21f199374"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/6cda91bbb8dc3d22ef0323008a12dcf73a5129da"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/ce829286f4935f1eb6b5dcb64da02910ce149c76"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/d497b7566e74920acfe283dd6b2cbf1682890796"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55c"}],"remediation":[],"revision":"be3ad4fd038f2f8e4a4b50b797233dcc5d012c08dc4c74cf0d9cd194f3bf333c","sources":[{"modifiedAt":1793984115818,"name":"CNA: Linux","retrievedAt":1793985994001,"url":"https://www.cve.org/CVERecord?id=CVE-2026-68410"},{"modifiedAt":1793985572120,"name":"NVD","retrievedAt":1793989649774,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68410"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986041039,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-68410"}],"ssvc":{"assessedAt":1793983733202,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"wifi: libertas: fix memory leak in helper_firmware_cb()","updatedAt":1793989649774}