Linux Kernel Refcount Leak Vulnerability in Libertias WiFi Driver

A refcount leak vulnerability has been identified in the Linux kernel's WiFi driver for the Libertas chipset. This issue arises because the function 'usb_get_dev' is called before 'lbs_get_firmware_async', creating a potential leak in the reference count. If 'lbs_get_firmware_async' fails, 'usb_put_dev' needs to be called to prevent the leak.

Impact

Exploitation of this vulnerability can lead to a reference count leak, which may cause memory management issues such as use-after-free vulnerabilities.