CVE-2026-53299

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx()

If queue entry list allocation fails in airoha_qdma_init_tx_queue routine, airoha_qdma_cleanup_tx_queue() will trigger a NULL pointer dereference accessing the queue entry array. The issue is due to the early ndesc initialization in airoha_qdma_init_tx_queue(). Fix the issue moving ndesc initialization at end of airoha_qdma_init_tx routine.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxad02cb61c52cae5afa3e2de6adbb49ad884c26e9 < 90619fdedfb9cc8a80f217d882ee7a84d3703e72affected
LinuxLinux3f47e67dff1f7266e112c50313d63824f6f17102 < ece31f9dae0c3cd3277e66667e7b8ab2577cf34aaffected
LinuxLinux3f47e67dff1f7266e112c50313d63824f6f17102 < f329924bb49458c65297f1361f545816a5b90998affected
LinuxLinux6.19affected
LinuxLinux0 < 6.19unaffected
LinuxLinux7.0.10 <= 7.0.*unaffected
LinuxLinux7.1 <= *unaffected

Weaknesses

References