CVE-2026-53338: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues()
In the Linux kernel, the following vulnerability has been resolved:
net: airoha: Add NULL check for ofreservedmemlookup() in airohaqdmainithfwdqueues()
ofreservedmemlookup() may return NULL if the reserved memory region referenced by the "memory-region" phandle is not found in the reserved memory table (e.g. due to a misconfigured DTS or a removed memory-region node). The current code dereferences the returned pointer without checking for NULL, leading to a kernel NULL pointer dereference at the following lines:
dmaaddr = rmem->base; // line 1156 numdesc = divu64(rmem->size, bufsize); // line 1160
Add a NULL check after ofreservedmemlookup() and return -ENODEV if the lookup fails, which is consistent with the existing error handling for ofparsephandle() failure in the same code block.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In airoha_qdma_init_hfwd_queues(), after calling rmem = of_reserved_mem_lookup(...), add a NULL check: if rmem is NULL, return -ENODEV before dereferencing rmem->base or rmem->size (e.g., lines where dma_addr = rmem->base and num_desc = div_u64(rmem->size, buf_size)).
Linux kernel (net: airoha) airoha_qdma_init_hfwd_queues() NULL check after of_reserved_mem_lookup() = return -ENODEV
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53338?
The severity of CVE-2026-53338 is rated at risk level 27.
How do I fix CVE-2026-53338?
To fix CVE-2026-53338, ensure that the Linux kernel is updated to the latest version where this vulnerability has been addressed.
What does CVE-2026-53338 affect?
CVE-2026-53338 affects the Linux kernel, specifically the net subsystem in the airoha driver.
What vulnerability is addressed in CVE-2026-53338?
CVE-2026-53338 addresses a potential NULL pointer dereference in the airoha_qdma_init_hfwd_queues() function.
When was CVE-2026-53338 published?
CVE-2026-53338 was published on July 1, 2026.