CVE-2026-63859: net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue()
Published Jul 19, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: airoha: Add missing bits in airohaqdmacleanuptxqueue()
Similar to airohaqdmacleanuprxqueue(), reset DMA TX descriptors in airohaqdmacleanuptxqueue routine. Moreover, reset TXDMAIDX to TXCPUIDX to notify the NIC the QDMA TX ring is empty.
Affected Software
4 affected componentsFixes available
Linux Linux kernel
debian/linux<=6.12.107-1
6.1.176-16.1.190-16.12.115-27.2.12-17.2.15-1
debian/linux<6.12.115-2
6.12.115-2
debian/linux<7.0.10-1
7.0.10-1
Event History
Jul 19, 2026
CVE Published
via MITRE·02:04 PM
Data Sourced
via MITRE·02:04 PM
Description
Data Sourced
via NVD·03:16 PM
Description
Data Sourced
via OSV·03:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-63859?
CVE-2026-63859 has been assigned a risk score of 17.
2
What systems are affected by CVE-2026-63859?
CVE-2026-63859 affects the Linux kernel, specifically the airoha network driver.
3
How do I fix CVE-2026-63859?
To fix CVE-2026-63859, ensure you update to the latest version of the Linux kernel that includes the fix.
4
What is the impact of CVE-2026-63859?
The impact of CVE-2026-63859 involves potential issues with the cleanup of DMA TX descriptors in certain network operations.
5
When was CVE-2026-63859 published?
CVE-2026-63859 was published on July 19, 2026.