PT-2026-8128 · Ath10K+3 · Ath10K+3

Published

2026-01-01

·

Updated

2026-05-22

·

CVE-2026-23133

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel’s wifi subsystem, specifically within the ath10k driver, related to the handling of DMA (Direct Memory Access) mapped buffers. The issue involves incorrect address usage when freeing DMA allocated coherent memory. Specifically, the dma free coherent() function uses the aligned addresses instead of the unaligned addresses stored during allocation with dma alloc coherent(). This can lead to memory corruption or other undefined behavior.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23133
OESA-2026-1760
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20667-1
SUSE-SU-2026:20720-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8162-1
USN-8180-1
USN-8180-2
USN-8180-3
USN-8180-4
USN-8180-5
USN-8180-6
USN-8186-1
USN-8187-1
USN-8188-1
USN-8243-1
USN-8275-1
USN-8278-1
USN-8289-1
USN-8296-1
USN-8297-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu
Ath10K