NULL Pointer Dereference in Airoha QDMA Linux Kernel Driver

Publication date: 2026-06-26

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() If queue entry list allocation fails in airoha_qdma_init_tx_queue routine, airoha_qdma_cleanup_tx_queue() will trigger a NULL pointer dereference accessing the queue entry array. The issue is due to the early ndesc initialization in airoha_qdma_init_tx_queue(). Fix the issue moving ndesc initialization at end of airoha_qdma_init_tx routine.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-26

Last Modified

2026-07-08

Generated

2026-07-17

AI Q&A

2026-06-26

EPSS Evaluated

2026-07-15

NVD

CVE-2026-53299

EUVD

EUVD-2026-39834

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's airoha network driver. It occurs when the allocation of the queue entry list fails in the airoha_qdma_init_tx_queue routine. Due to early initialization of the 'ndesc' variable, the cleanup function airoha_qdma_cleanup_tx_queue attempts to access a NULL pointer in the queue entry array, causing a NULL pointer dereference. The fix involves moving the initialization of 'ndesc' to the end of the airoha_qdma_init_tx routine to prevent this issue.

Impact Analysis

This vulnerability can lead to a NULL pointer dereference in the Linux kernel's network driver, which may cause the affected system to crash or become unstable. Such crashes can result in denial of service conditions, potentially disrupting network communications or other dependent services.

Hi! I’m here to help you understand CVE-2026-53299. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70