Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0014 2.6 —
AFFECTED Product Versions Fixed Linux 06be6b149f7e406bcf16098567f5a6c9f042bced – — Linux 3.13 – 5.10.258
TIMELINE Jan 13 Reserved by Linux Apr 3 Published (CNA: Linux) Oct 15 RESCORED — CVE-2026-23444 (Linux). CVSS 7.8 → 5.5 (NVD).
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure ieee80211_tx_prepare_skb() has three error paths, but only two of them free the skb. The first error path (ieee80211_tx_prepare() returning TX_DROP) does not free it, while invoke_tx_handlers() failure and the fragmentation check both do. Add kfree_skb() to the first error path so all three are consistent, and remove the now-redundant frees in callers (ath9k, mt76, mac80211_hwsim) to avoid double-free. Document the skb ownership guarantee in the function's kdoc.
| Date | Event | Detail |
|---|---|---|
| January 13, 2026 | Reserved | Reserved by Linux |
| April 3, 2026 | Published | Published (CNA: Linux) |
| October 15, 2026 | RESCORED | RESCORED — CVE-2026-23444 (Linux). CVSS 7.8 → 5.5 (NVD). |
Authoritative record: CVE-2026-23444 at cve.org
Vendors: linux
Weaknesses: CWE-401
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-23444 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
