CVE-2026-53298

kernel: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 26, 2026

Updated · June 29, 2026

Description

A flaw was found in the Linux kernel's airoha network driver. An issue with early initialization of the ndesc variable in the airoha_qdma_init_rx_queue() routine can lead to a NULL pointer dereference during cleanup. This can result in a Denial of Service (DoS) condition. Additionally, improper ordering of page pool allocation could lead to memory leaks.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference