PT-2026-61138 · Linux · Linux Kernel

CVE-2026-63822 · Published 2026-07-19 · Updated 2026-07-20

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the ath11k WiFi driver. When a firmware-related initialization error occurs, the buffers dp->tx ring[i].tx status are released. These same buffers are released again during the device unbinding process in ath11k pci, leading to a system warning. This behavior is consistently reproducible in virtual machine environments where MSI addressing initialization fails. A double free occurs when the system attempts to release the same memory location twice, which can lead to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-63822

Affected Products

Linux Kernel

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-63822 · Security Note
• https://git.kernel.org/stable/c/051f954b94479d72222c9fbc82a3eef4777bca01 · Note
• https://git.kernel.org/stable/c/318703b6f71d1a29ee0ac46c32a38f7734d4cfb2 · Note
• https://git.kernel.org/stable/c/40aa3c2b0cb8e34e0576fc94cc70e4e33db03c0a · Note
• https://twitter.com/VulmonFeeds/status/2078874102257852803 · Twitter Post
• https://twitter.com/windowsforum/status/2079106576409837774 · Twitter Post
• https://git.kernel.org/stable/c/0aa097a370277deab5337030b9e2d395742f469c · Note
• https://git.kernel.org/stable/c/7b2e62b9080bf4a5f4e70cfe47156df8d93a4f13 · Note
• https://git.kernel.org/stable/c/8b7a26b6681922a38cd5a7829ace61f8e54df9b7 · Note
• https://git.kernel.org/stable/c/0a946abb82f29abe9a15173b707a449cb039b43e · Note
• https://git.kernel.org/stable/c/e569a5cb401a267168621aa9a1e7f07fcc9612c3 · Note