CVE-2026-52983
Received Received - Intake
BQL Imbalance in Airoha Linux Kernel Driver

Publication date: 2026-06-24

Last updated on: 2026-06-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path Fix a possible BQL imbalance in airoha_dev_xmit(), where inflight packets are accounted only for the AIROHA_NUM_TX_RING netdev TX queues. The queue index is computed as: qid = skb_get_queue_mapping(skb) % ARRAY_SIZE(qdma->q_tx) txq = netdev_get_tx_queue(dev, qid); However, airoha_qdma_tx_napi_poll() accounts completions across all netdev TX queues (num_tx_queues), leading to inconsistent BQL accounting. Also reset all netdev TX queues in the ndo_stop callback.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-24
Last Modified
2026-06-24
Generated
2026-06-25
AI Q&A
2026-06-24
EPSS Evaluated
N/A
NVD
CVE-2026-52983
EUVD
EUVD-2026-38851
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
airoha linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's airoha network driver. It involves a bug in the Byte Queue Limits (BQL) accounting within the transmit (TX) path. Specifically, the function airoha_dev_xmit() only accounts for inflight packets on a limited number of TX queues (AIROHA_NUM_TX_RING), but the completion function airoha_qdma_tx_napi_poll() accounts completions across all TX queues. This mismatch leads to inconsistent BQL accounting, which can cause issues in network packet transmission management.

Additionally, the fix includes resetting all netdev TX queues in the ndo_stop callback to ensure proper queue state management.

Impact Analysis

The vulnerability causes inconsistent accounting of packets in the transmit queues of the network device driver. This can lead to imbalanced queue management, potentially resulting in degraded network performance, packet loss, or transmission delays. Such issues could affect the reliability and efficiency of network communications on affected systems.

Mitigation Strategies

The vulnerability has been resolved by fixing the BQL imbalance in the airoha driver within the Linux kernel. Immediate mitigation involves updating your Linux kernel to a version that includes the fix for this issue.

Specifically, the fix addresses the inconsistent BQL accounting in the airoha_dev_xmit() and airoha_qdma_tx_napi_poll() functions and resets all netdev TX queues in the ndo_stop callback.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-52983. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart