CVE-2026-53299: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx()
In the Linux kernel, the following vulnerability has been resolved:
net: airoha: Move ndesc initialization at end of airohaqdmainittx()
If queue entry list allocation fails in airohaqdmainittxqueue routine, airohaqdmacleanuptxqueue() will trigger a NULL pointer dereference accessing the queue entry array. The issue is due to the early ndesc initialization in airohaqdmainittxqueue(). Fix the issue moving ndesc initialization at end of airohaqdmainittx routine.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53299?
The severity of CVE-2026-53299 is medium with a CVSS score of 5.5.
What type of vulnerability is CVE-2026-53299?
CVE-2026-53299 is classified as a Null Pointer Dereference vulnerability.
How do I fix CVE-2026-53299?
To fix CVE-2026-53299, you should apply the available patch from the Linux kernel.
What software is affected by CVE-2026-53299?
CVE-2026-53299 affects the Linux Kernel.
What can happen if CVE-2026-53299 is exploited?
Exploitation of CVE-2026-53299 can lead to a NULL pointer dereference, potentially causing system instability.