CVE-2026-63822

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability, a double free, occurs when memory buffers are incorrectly released twice during the device unbinding process after an initial firmware initialization error. This can lead to system instability or a kernel crash, potentially impacting system availability.

This vulnerability is rated as Moderate severity because exploitation requires local access and is constrained to systems utilizing specific Qualcomm ath11k wireless hardware. Typical enterprise server deployments do not employ Wi-Fi adapters, significantly limiting default exposure. Under affected configurations, triggering device removal following an initialization error leads to a double-free condition that can crash the system, resulting in a denial of service without impacting data confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.