The ath10k wireless driver in the Linux kernel misuses the pointer returned by dma_alloc_coherent() when freeing a buffer. The allocation routine stores the hardware address in an unaligned field, but the free routine uses the aligned address instead, creating a pointer mismatch that can corrupt kernel memory. This memory corruption can destabilize the kernel and compromise its integrity, though the CVE description does not specify higher‑level impacts such as privilege escalation.

All Linux kernel builds that include the ath10k driver and have not yet incorporated the fix commit are affected. This includes the generic Linux kernel kernel and the 6.19 release‑candidate series from rc1 through rc6.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% suggests a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the flaw would be exercised by a DMA operation in the ath10k driver, which could be triggered by inbound wireless traffic or malformed packets. The likely attack vector is network‑based, but the CVE description does not quantify the exact conditions, so the possibility remains speculative.