PT-2026-30139 · Unknown+3 · Mac80211 Hwsim+3

Published 2026-04-03 · Updated 2026-04-20 · CVE-2026-23444

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's mac80211 component related to the handling of skb (socket buffer) memory allocation within the ieee80211 tx prepare skb() function. Specifically, the function had inconsistent error handling paths, where only two out of three error scenarios resulted in the proper freeing of the allocated skb. This inconsistency could lead to a memory leak if ieee80211 tx prepare() returned TX DROP. The fix ensures that the skb is freed in all error paths and removes redundant frees in calling functions like ath9k, mt76, and mac80211 hwsim to prevent double-free issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-23444

ECHO-0715-F2FE-CBC5

OESA-2026-1946

OESA-2026-1947

OESA-2026-1948

Affected Products

Linux Kernel

Ath9K

Mac80211 Hwsim

Mt76

References · 34

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31408 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23444 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1948 · Vendor Advisory
• https://git.kernel.org/stable/c/06e769dddcbeb3baf2ce346273b53dd61fdbecf4 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23444 · Vendor Advisory
• https://git.kernel.org/stable/c/d5ad6ab61cbd89afdb60881f6274f74328af3ee9 · Patch
• https://git.kernel.org/stable/c/50f1b690b4868923fbd242298def2fb88662f108 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-68291 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31393 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23389 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23440 · Security Note
• https://ubuntu.com/security/CVE-2026-23444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23461 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31399 · Security Note