---
id: CVE-2026-23135
title: 'wifi: ath12k: fix dma_free_coherent() pointer'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: ath12k: fix dma_free_coherent() pointer

  dma_alloc_coherent() allocates a DMA mapped buffer and stores the
  addresses in XXX_unaligned fields.  Those should be reu…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 <
    36e0bc5e8b282564906fca636c4ebc99814de4e7
  - >-
    Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 <
    24585a13c41ea7253ee59aac74441fb570f5824a
  - >-
    Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 <
    4846b32be324f4dd3653f38a3f69c049543d52ae
  - >-
    Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 <
    bb97131fbf9b708dd9616ac2bdc793ad102b5c48
  - Linux 6.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:20:22.198840Z'
published: '2026-02-14'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:23:18.671Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23135'
references:
  - url: 'https://git.kernel.org/stable/c/36e0bc5e8b282564906fca636c4ebc99814de4e7'
  - url: 'https://git.kernel.org/stable/c/24585a13c41ea7253ee59aac74441fb570f5824a'
  - url: 'https://git.kernel.org/stable/c/4846b32be324f4dd3653f38a3f69c049543d52ae'
  - url: 'https://git.kernel.org/stable/c/bb97131fbf9b708dd9616ac2bdc793ad102b5c48'
tags:
  - cve.org
epss: 0.00143
epssPercentile: 0.03625
ingestedAt: '2026-11-05T22:38:32.075Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix dma_free_coherent() pointer

dma_alloc_coherent() allocates a DMA mapped buffer and stores the
addresses in XXX_unaligned fields.  Those should be reused when freeing
the buffer rather than the aligned addresses.

## Affected

- `Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 36e0bc5e8b282564906fca636c4ebc99814de4e7`
- `Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 24585a13c41ea7253ee59aac74441fb570f5824a`
- `Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 4846b32be324f4dd3653f38a3f69c049543d52ae`
- `Linux >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < bb97131fbf9b708dd9616ac2bdc793ad102b5c48`
- `Linux 6.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.