AZL-81837
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81837.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-81837
- Upstream
- Published
- 2026-04-03T16:16:28Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-23444 affecting package kernel for versions less than 6.6.137.1-2
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: always free skb on ieee80211txprepare_skb() failure
ieee80211txprepareskb() has three error paths, but only two of them free the skb. The first error path (ieee80211txprepare() returning TXDROP) does not free it, while invoketxhandlers() failure and the fragmentation check both do.
Add kfreeskb() to the first error path so all three are consistent, and remove the now-redundant frees in callers (ath9k, mt76, mac80211hwsim) to avoid double-free.
Document the skb ownership guarantee in the function's kdoc.
- References