CVE-2026-63859
Received Received - Intake

Buffer Overflow in Linux Kernel Airoha Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue() Similar to airoha_qdma_cleanup_rx_queue(), reset DMA TX descriptors in airoha_qdma_cleanup_tx_queue routine. Moreover, reset TX_DMA_IDX to TX_CPU_IDX to notify the NIC the QDMA TX ring is empty.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63859
EUVD
EUVD-2026-45543

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
airoha linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing cleanup operation in the airoha_qdma_cleanup_tx_queue function. It requires resetting DMA TX descriptors and updating TX_DMA_IDX to TX_CPU_IDX to indicate the QDMA TX ring is empty, similar to a previously fixed issue in airoha_qdma_cleanup_rx_queue.

Detection Guidance

This vulnerability is specific to the Linux kernel's airoha driver and involves missing cleanup of DMA TX descriptors. Detection requires checking kernel logs for related errors or examining the airoha driver code for uninitialized descriptors. No direct commands are provided in the context to detect this issue.

Impact Analysis

This vulnerability could lead to network performance issues or instability in systems using the Airoha QDMA driver. It may cause incomplete data transmission or unexpected behavior in network interfaces.

Compliance Impact

This vulnerability does not provide sufficient information to determine its impact on compliance with standards like GDPR or HIPAA. The description focuses on a Linux kernel driver issue without details on data exposure or privacy implications.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve this vulnerability. Monitor vendor advisories for kernel updates addressing this issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63859. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart