CVE-2026-23135

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix dma_free_coherent() pointer

dma_alloc_coherent() allocates a DMA mapped buffer and stores the addresses in XXX_unaligned fields. Those should be reused when freeing the buffer rather than the aligned addresses.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= d889913205cf7ebda905b1e62c5867ed4e39f6c2, < 36e0bc5e8b282564906fca636c4ebc99814de4e7; >= d889913205cf7ebda905b1e62c5867ed4e39f6c2, < 24585a13c41ea7253ee59aac74441fb570f5824a; >= d889913205cf7ebda905b1e62c5867ed4e39f6c2, < 4846b32be324f4dd3653f38a3f69c049543d52ae; >= d889913205cf7ebda905b1e62c5867ed4e39f6c2, < bb97131fbf9b708dd9616ac2bdc793ad102b5c48
LinuxLinux6.3

References

Timeline

Published
Feb 14, 2026
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-231365.5In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault() When a fault occurs, tCVE-2026-231375.5In the Linux kernel, the following vulnerability has been resolved: of: unittest: Fix memory leak in unittest_data_add() In unittest_data_CVE-2026-231385.5In the Linux kernel, the following vulnerability has been resolved: tracing: Add recursion protection in kernel stack trace recording A buCVE-2026-231395.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only when GC has been performedCVE-2026-23148.8Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via CVE-2026-231405.5In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Subtract size of xdp_frame from allowed metadata size TCVE-2026-231415.5In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in range_is_hole_in_parent() BefCVE-2026-231425.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setCVE-2026-231435.5In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix misalignment bug in struct virtnet_info Use the new TRCVE-2026-231445.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure WheCVE-2026-231455.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref The error branchCVE-2026-231465.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uar
CVE-2026-23135: Medium severity, CVSS 5.5 | Vulnix