CVE-2026-23133 Linux CVE debrief

Who should care

Linux kernel maintainers, Linux distribution maintainers, and users of Linux systems with the affected module should assess exposure and prioritize verification of affected systems. They should review Linux kernel versions for exposure, verify system configurations for potential impact, and monitor for potential exploitation attempts. This includes operators, platforms, vulnerability-management teams, and security teams that may be impacted by this issue.

Why it matters

CVE-2026-23133 is a vulnerability in the Linux kernel's wifi: ath10k module. Maintainers and users should assess exposure and prioritize verification of affected systems.

• Verify potential exposure of Linux systems with the affected module
• Assess the impact of potential exploitation attempts on Linux systems

Technical summary

The Linux kernel has a vulnerability in the wifi: ath10k module related to fixing dma_free_coherent() pointer. dma_alloc_coherent() allocates a DMA mapped buffer and stores the addresses in XXX_unaligned fields. Those should be reused when freeing the buffer rather than the aligned addresses. This issue affects Linux kernel maintainers, Linux distribution maintainers, and users of Linux systems with the affected module. The vulnerability has been resolved, but potential exposure and impact should be assessed. Maintainers and users should prioritize verification of affected systems and review Linux kernel versions for exposure.

Defensive priority

Linux kernel maintainers and users should assess exposure and prioritize verification of affected systems.

Recommended defensive actions

• Review Linux kernel versions for exposure
• Verify system configurations for potential impact
• Monitor for potential exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The source corpus provides limited information about the vulnerability, including a description of the issue and several source references. CVE Program and NVD detail pages offer additional context. However, the source detail is limited, and explicit evidence-limit language and defensive verification tasks are necessary. Defenders should verify potential exposure of Linux systems with the affected module and assess the impact of potential exploitation attempts.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.