PT-2026-8128
CVE-2026-23133
·
Published
2026-01-01
·
Updated
2026-10-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s wifi subsystem, specifically within the ath10k driver, related to the handling of DMA (Direct Memory Access) mapped buffers. The issue involves incorrect address usage when freeing DMA allocated coherent memory. Specifically, the
dma free coherent() function uses the aligned addresses instead of the unaligned addresses stored during allocation with dma alloc coherent(). This can lead to memory corruption or other undefined behavior.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾