CVE-2026-23281

CVE-2026-23281 is a use-after-free vulnerability found in the Linux kernel's `libertas` Wi-Fi driver. This flaw occurs because the `lbs_free_adapter()` function uses a non-synchronous timer deletion, allowing active timer callbacks to access memory that has already been freed. Exploiting this race condition could lead to system instability, denial of service, or potentially arbitrary code execution within the kernel, despite a low FAUCET Risk Score of 20.0. There is currently no evidence of active exploitation, nor are there any public exploit modules or significant community discussion surrounding this vulnerability.