Vulnerabilities
- CVSS
- 5.5 Medium
- Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H- EPSS
- 0.17%
- Risk score
- 3.8
- Published
- 2026-07-19
- Status
- Published
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix warning when unbinding
If there is an error during some initialization related to firmware,
the buffers dp->tx_ring[i].tx_status are released.
However this is released again when the device is unbinded (ath11k_pci),
and we get:
WARNING: CPU: 0 PID: 6231 at mm/slub.c:4368 free_large_kmalloc+0x57/0x90
Call Trace:
free_large_kmalloc
ath11k_dp_free
ath11k_core_deinit
ath11k_pci_remove
...
The issue is always reproducible from a VM because the MSI addressing
initialization is failing.
In order to fix the issue, just set the buffers to NULL after releasing in
order to avoid the double free.
A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability, a double free, occurs when memory buffers are incorrectly released twice during the device unbinding process after an initial firmware initialization error. This can lead to system instability or a kernel crash, potentially impacting system availability.
Coverage 4
threat-intel
Multiple vulnerabilities have been discovered in the SUSE Linux kernel. These vulnerabilities can lead to data confidentiality and integrity breaches, policy circumvention, and denial of service conditions. The affected…
threat-intel
Multiple vulnerabilities have been discovered in the Linux kernel of SUSE. Several of these vulnerabilities allow for privilege escalation, data confidentiality breaches, and data integrity issues. These vulnerabilities…
threat-intel
Multiple vulnerabilities have been discovered in the Linux kernel of Debian LTS. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions include 11 (Bull…
vulnerability
Multiple vulnerabilities have been discovered within the Linux kernel of Debian LTS. These vulnerabilities include potential for data confidentiality breaches, denial of service attacks, and privilege escalation. Several…
Advisories and references