CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: always free skb on ieee80211txprepareskb() failure
ieee80211txprepareskb() has three error paths, but only two of them free the skb. The first error path (ieee80211txprepare() returning TXDROP) does not free it, while invoketxhandlers() failure and the fragmentation check both do.
Add kfreeskb() to the first error path so all three are consistent, and remove the now-redundant frees in callers (ath9k, mt76, mac80211hwsim) to avoid double-free.
Document the skb ownership guarantee in the function's kdoc.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23444?
CVE-2026-23444 has a severity rating of high, with a score of 7.8.
How do I fix CVE-2026-23444?
To fix CVE-2026-23444, you should upgrade to the latest version of the Linux kernel that includes the patches for this vulnerability.
What are the potential impacts of CVE-2026-23444?
CVE-2026-23444 can lead to memory leaks, which may affect system stability and performance.
Which software is affected by CVE-2026-23444?
CVE-2026-23444 affects the Linux kernel, specifically the mac80211 subsystem.
When was CVE-2026-23444 published?
CVE-2026-23444 was published on April 3, 2026.