CVE-2026-63822Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp->tx_ring[i].tx_status are released. However this is released again when the device is unbinded (ath11k_pci), and we get: WARNING: CPU: 0 PID: 6231 at mm/slub.c:4368 free_large_kmalloc+0x57/0x90 Call Trace: free_large_kmalloc ath11k_dp_free ath11k_core_deinit ath11k_pci_remove ... The issue is always reproducible from a VM because the MSI addressing initialization is failing. In order to fix the issue, just set the buffers to NULL after releasing in order to avoid the double free.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-19); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-19: 1Mentions · 2026-07-20: 1Patch / Workaround · 2026-07-20: 1Technical Details · 2026-07-19: 1Technical Details · 2026-07-20: 107-1907-20
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-191
Disclosure1
2026-07-201
Patch1
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-63822 Double Free Vulnerability in Linux Kernel ath11k WiFi Driver Unbinding https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-63822

    Post summary

    The note announces a double‑free flaw (CVE‑2026‑63822) in the Linux ath11k WiFi driver, providing a brief technical descriptor but no PoC, exploit, or mitigation.

    0000194
    4.1K followersView on X
  • Windows Forum@windowsforum
    Patch

    🛡️ CVE-2026-63822 is a Linux ath11k Wi‑Fi driver double-free—not a Windows 11 flaw. Linux users should patch; everyone else can stop blaming Windows for penguin problems. https://windowsforum.com/threads/cve-2026-63822-fixes-linux-ath11k-wi-fi-double-free.439551/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #PciePassthrough #QualcommAth11K #Cve202663822 https://t.co/dAN5iuuifH

    Post summary

    The post states CVE‑2026‑63822 is a double‑free bug in the Linux ath11k Wi‑Fi driver (not a Windows 11 flaw) and urges Linux users to apply the available patch, with no evidence of active exploitation or a PoC.

    0000037
    1.3K followersView on X

Explore more