PT-2026-8130 · Linux+3 · Linux Kernel+3

Published 2026-01-01 · Updated 2026-06-04 · CVE-2026-23135

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s ath12k driver related to DMA memory management. Specifically, the issue involves incorrect pointer handling during the freeing of DMA-mapped buffers allocated using dma alloc coherent(). The dma free coherent() function was using aligned addresses instead of the unaligned addresses stored in XXX unaligned fields when freeing the buffer, potentially leading to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23135

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:0962-1

SUSE-SU-2026:1081-1

SUSE-SU-2026:20667-1

SUSE-SU-2026:20720-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

USN-8278-1

USN-8278-2

USN-8289-1

USN-8289-2

USN-8296-1

USN-8296-2

USN-8393-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

Ath12K

References · 1803

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23135.json · Exploit
• https://ubuntu.com/security/CVE-2026-23078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23089 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71184 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23086 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22997 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31431 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46000 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8289-2 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23135 · Vendor Advisory
• https://git.kernel.org/stable/c/4846b32be324f4dd3653f38a3f69c049543d52ae · Patch
• https://ubuntu.com/security/CVE-2026-23163 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8296-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20416-1 · Vendor Advisory