CVE-2026-23444
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
03/04/2026
Última modificación:
03/04/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure<br />
<br />
ieee80211_tx_prepare_skb() has three error paths, but only two of them<br />
free the skb. The first error path (ieee80211_tx_prepare() returning<br />
TX_DROP) does not free it, while invoke_tx_handlers() failure and the<br />
fragmentation check both do.<br />
<br />
Add kfree_skb() to the first error path so all three are consistent,<br />
and remove the now-redundant frees in callers (ath9k, mt76,<br />
mac80211_hwsim) to avoid double-free.<br />
<br />
Document the skb ownership guarantee in the function&#39;s kdoc.



