CVE-2026-53107 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: don't kill URBs in interrupt context Serialization for the TX path was enforced by calling usb_kill_urb()/usb_kill_anchored_urbs(), to prevent transmission before a previous URB was completed. usb_tx_block() can be called from interrupt context (e.g. in the HCD giveback path), so we can't always use it to kill in-flight URBs. Prevent sleeping during interrupt context by checking the tx_submitted anchor for existing URBs. We now return -EBUSY, to indicate there's a pending request.
A vulnerability in the Linux kernel's WiFi Libertas driver has been addressed, concerning the management of USB Request Buffers (URBs) in interrupt context. The issue arose because the transmission path was serialized by using usb_kill_urb() and usb_kill_anchored_urbs() to prevent new transmissions before the completion of previous ones. However, usb_tx_block() can be invoked from interrupt context, such as during the Host Controller Driver (HCD) giveback phase, making it unreliable for terminating active URBs. The vulnerability has been fixed by modifying the transmission block function to check for pending URBs in the tx_submitted anchor, thereby avoiding the need to sleep in interrupt context. The function now returns -EBUSY to signal a pending request, ensuring proper URB management without disrupting interrupt processing.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is available in the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/00c0317cebf44151df18fb647781f315268cdd98 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4f273d3f98ebc60c30bbfb3ed4a7f0477d3eaed2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7c5c2b661bdb78c1472b8833265c9ed1ee880039 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.10.252, < 5.11 >= 5.15.202, < 5.16 >= 6.1.165, < 6.2 >= 6.6.128, < 6.7 >= 6.12.75, < 6.13 >= 6.18.16, < 6.18.33 >= 6.19.6, < 7.0.10 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | Initial Analysis | [email protected] |
| Jun 24, 2026 | New CVE Received | kernel.org |