PT-2026-52937 · Undefined · Undefined

Published

2026-06-26

·

Updated

2026-06-26

·

CVE-2026-53298

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
net: airoha: Move ndesc initialization at end of airoha qdma init rx queue()
If queue entry or DMA descriptor list allocation fails in airoha qdma init rx queue routine, airoha qdma cleanup() will trigger a NULL pointer dereference running netif napi del() for RX queue NAPIs since netif napi add() has never been executed to this particular RX NAPI. The issue is due to the early ndesc initialization in airoha qdma init rx queue() since airoha qdma cleanup() relies on ndesc value to check if the queue is properly initialized. Fix the issue moving ndesc initialization at end of airoha qdma init tx routine. Move page pool allocation after descriptor list allocation in order to avoid memory leaks if desc allocation fails.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-53298

Affected Products

Undefined