{"id":"CVE-2026-23135","title":"wifi: ath12k: fix dma_free_coherent() pointer","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix dma_free_coherent() pointer\n\ndma_alloc_coherent() allocates a DMA mapped buffer and stores the\naddresses in XXX_unaligned fields.  Those should be reu…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 36e0bc5e8b282564906fca636c4ebc99814de4e7","Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 24585a13c41ea7253ee59aac74441fb570f5824a","Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 4846b32be324f4dd3653f38a3f69c049543d52ae","Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < bb97131fbf9b708dd9616ac2bdc793ad102b5c48","Linux 6.3"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:20:22.198840Z"},"published":"2026-02-14","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:23:18.671Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23135","references":[{"url":"https://git.kernel.org/stable/c/36e0bc5e8b282564906fca636c4ebc99814de4e7"},{"url":"https://git.kernel.org/stable/c/24585a13c41ea7253ee59aac74441fb570f5824a"},{"url":"https://git.kernel.org/stable/c/4846b32be324f4dd3653f38a3f69c049543d52ae"},{"url":"https://git.kernel.org/stable/c/bb97131fbf9b708dd9616ac2bdc793ad102b5c48"}],"tags":["cve.org"],"epss":0.00143,"epssPercentile":0.03625,"ingestedAt":"2026-11-05T22:38:32.075Z","slug":"CVE-2026-23135","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix dma_free_coherent() pointer\n\ndma_alloc_coherent() allocates a DMA mapped buffer and stores the\naddresses in XXX_unaligned fields.  Those should be reused when freeing\nthe buffer rather than the aligned addresses.\n\n## Affected\n\n- `Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 36e0bc5e8b282564906fca636c4ebc99814de4e7`\n- `Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 24585a13c41ea7253ee59aac74441fb570f5824a`\n- `Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 4846b32be324f4dd3653f38a3f69c049543d52ae`\n- `Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < bb97131fbf9b708dd9616ac2bdc793ad102b5c48`\n- `Linux 6.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}