CVE-2026-53299
Received Received - Intake
NULL Pointer Dereference in Airoha QDMA Linux Kernel Driver

Publication date: 2026-06-26

Last updated on: 2026-06-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() If queue entry list allocation fails in airoha_qdma_init_tx_queue routine, airoha_qdma_cleanup_tx_queue() will trigger a NULL pointer dereference accessing the queue entry array. The issue is due to the early ndesc initialization in airoha_qdma_init_tx_queue(). Fix the issue moving ndesc initialization at end of airoha_qdma_init_tx routine.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-26
Last Modified
2026-06-26
Generated
2026-06-27
AI Q&A
2026-06-26
EPSS Evaluated
N/A
NVD
CVE-2026-53299
EUVD
EUVD-2026-39834
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
airoha linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

This vulnerability can lead to a NULL pointer dereference in the Linux kernel's network driver, which may cause the affected system to crash or become unstable. Such crashes can result in denial of service conditions, potentially disrupting network communications or other dependent services.

Executive Summary

This vulnerability exists in the Linux kernel's airoha network driver. It occurs when the allocation of the queue entry list fails in the airoha_qdma_init_tx_queue routine. Due to early initialization of the 'ndesc' variable, the cleanup function airoha_qdma_cleanup_tx_queue attempts to access a NULL pointer in the queue entry array, causing a NULL pointer dereference. The fix involves moving the initialization of 'ndesc' to the end of the airoha_qdma_init_tx routine to prevent this issue.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53299. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart