CVE-2026-63822
Received Received - Intake

Double Free in Ath11k WiFi Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp->tx_ring[i].tx_status are released. However this is released again when the device is unbinded (ath11k_pci), and we get: WARNING: CPU: 0 PID: 6231 at mm/slub.c:4368 free_large_kmalloc+0x57/0x90 Call Trace: free_large_kmalloc ath11k_dp_free ath11k_core_deinit ath11k_pci_remove ... The issue is always reproducible from a VM because the MSI addressing initialization is failing. In order to fix the issue, just set the buffers to NULL after releasing in order to avoid the double free.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63822
EUVD
EUVD-2026-45488

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel *
linux_kernel ath11k *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a double-free issue in the ath11k Wi-Fi driver. When firmware initialization fails, memory buffers are freed twice: once during error handling and again during device unbinding. This causes a kernel warning due to the invalid memory release.

Detection Guidance

This vulnerability is specific to the ath11k WiFi driver in the Linux kernel and may trigger a warning during device unbinding. Check kernel logs for the warning message: 'WARNING: CPU: X PID: Y at mm/slub.c:4368 free_large_kmalloc'. Use 'dmesg | grep free_large_kmalloc' to search for the issue.

Impact Analysis

The vulnerability can cause system instability or crashes due to kernel warnings or memory corruption. It is reproducible in virtual machines where MSI addressing initialization fails. Users may experience Wi-Fi driver failures or system freezes.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a kernel memory management issue in the ath11k Wi-Fi driver that causes a double-free warning during device unbinding. No data exposure or privacy implications are described.

Mitigation Strategies

Apply the Linux kernel update that resolves this issue. If immediate update is not possible, avoid unbinding the ath11k device until the patch is applied to prevent the double-free warning.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63822. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart