CVE-2026-52983

Analyzed Analyzed - Analysis Complete

BQL Imbalance in Airoha Linux Kernel Driver

Publication date: 2026-06-24

Last updated on: 2026-07-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path Fix a possible BQL imbalance in airoha_dev_xmit(), where inflight packets are accounted only for the AIROHA_NUM_TX_RING netdev TX queues. The queue index is computed as: qid = skb_get_queue_mapping(skb) % ARRAY_SIZE(qdma->q_tx) txq = netdev_get_tx_queue(dev, qid); However, airoha_qdma_tx_napi_poll() accounts completions across all netdev TX queues (num_tx_queues), leading to inconsistent BQL accounting. Also reset all netdev TX queues in the ndo_stop callback.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-14

Generated

2026-07-15

AI Q&A

2026-06-24

EPSS Evaluated

2026-07-14

NVD

CVE-2026-52983

EUVD

EUVD-2026-38851

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)
linux	linux_kernel	From 6.12.91 (inc) to 6.18.33 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's airoha network driver. It involves a bug in the Byte Queue Limits (BQL) accounting within the transmit (TX) path. Specifically, the function airoha_dev_xmit() only accounts for inflight packets on a limited number of TX queues (AIROHA_NUM_TX_RING), but the completion function airoha_qdma_tx_napi_poll() accounts completions across all TX queues. This mismatch leads to inconsistent BQL accounting, which can cause issues in network packet transmission management.

Additionally, the fix includes resetting all netdev TX queues in the ndo_stop callback to ensure proper queue state management.

Impact Analysis

The vulnerability causes inconsistent accounting of packets in the transmit queues of the network device driver. This can lead to imbalanced queue management, potentially resulting in degraded network performance, packet loss, or transmission delays. Such issues could affect the reliability and efficiency of network communications on affected systems.

Mitigation Strategies

The vulnerability has been resolved by fixing the BQL imbalance in the airoha driver within the Linux kernel. Immediate mitigation involves updating your Linux kernel to a version that includes the fix for this issue.

Specifically, the fix addresses the inconsistent BQL accounting in the airoha_dev_xmit() and airoha_qdma_tx_napi_poll() functions and resets all netdev TX queues in the ndo_stop callback.

Hi! I’m here to help you understand CVE-2026-52983. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70