CVE-2026-72070: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-72070DEBIAN-CVE-2026-72070
Published 15-08-2026Last modified 23-08-2026
Open JSON

Vulnerability summary

CVE-2026-72070 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.8% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 15 · Related 15
OPENSUSE-SU-2026:22091-1SUSE-SU-2026:24179-1SUSE-SU-2026:24184-1SUSE-SU-2026:24197-1SUSE-SU-2026:24235-1SUSE-SU-2026:4640-1

Timeline

  1. 15-08-2026
    PublishedVulnerability first disclosed.
  2. 23-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() lbtf_free_adapter() calls timer_delete(&priv->command_timer), which does not wait for a running command_timer_fn() callback. lbtf_free_adapter() runs on the teardown path right before ieee80211_free_hw() frees priv, both in lbtf_remove_card() and in the probe error path. command_timer is armed by mod_timer() in lbtf_cmd() whenever a firmware command is sent. command_timer_fn() dereferences priv. If a command times out as the device is removed, command_timer_fn() runs concurrently with teardown and dereferences priv after it has been freed. This is the same use-after-free that commit 03cc8f90d053 ("wifi: libertas: fix use-after-free in lbs_free_adapter()") fixed in the sibling libertas driver. The libertas_tf variant has the identical pattern and was left unchanged. Use timer_delete_sync() so any in-flight callback completes before priv is freed.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded) | < 6.8.0-147.147 | < 7.0.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1067.70 | < 7.0.0-1014.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.101-1 | < 7.1.5-1
  • linux-6.12< 6.12.101-1~deb12u1
Linux1 product
  • linux≥ 06b16ae5319251c26377afcb401e46056d5673f4, < bd75636681588c67006279abdb9a76a708b3ce29 | ≥ 06b16ae5319251c26377afcb401e46056d5673f4, < 2fba1d3b2f031a2c68e566a6d45cc5b7a8d6683d | ≥ 06b16ae5319251c26377afcb401e46056d5673f4, < 9392fd5de555272449d3d8c63410ea00f8ec853a | ≥ 06b16ae5319251c26377afcb401e46056d5673f4, < 4714e95f5d61cb9c5c7c6c4e68b618f37bc6ffcf | ≥ 06b16ae5319251c26377afcb401e46056d5673f4, < 066b59e84f90d270cc15f0370166155aca507630 | ≥ 06b16ae5319251c26377afcb401e46056d5673f4, < fcff712d0e3d183843ec3916470ee6cc3455baad | ≥ 06b16ae5319251c26377afcb401e46056d5673f4, < bcf7968cb97ce4312588042cf2712f04caff6d8f | ≥ 06b16ae5319251c26377afcb401e46056d5673f4, < aa6dcd5c8dd9ba1d7d0f60093bcda41c0d6d438d | 2.6.28

3 vendors · 172 products

References

20 links
Show all 20 references