The vulnerability in the Linux kernel's libertas wifi driver was due to the use of usb_kill_urb()/usb_kill_anchored_urbs() in interrupt context to enforce serialization of the TX path. Since usb_tx_block() can be called from interrupt context, killing in-flight URBs there is unsafe. The fix prevents sleeping during interrupt context by checking the tx_submitted anchor for existing URBs and returning -EBUSY to indicate a pending request, avoiding unsafe URB termination.

This vulnerability does not affect confidentiality or integrity but can cause denial of service by crashing or destabilizing the kernel due to unsafe operations in interrupt context. There are no known exploits in the wild.

A fix has been implemented in the Linux kernel to address this issue. Since no specific patch links or vendor advisories are provided, users should update to the latest Linux kernel versions that include this fix. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.