CVE-2026-53299

A flaw was found in the Linux kernel, specifically within the airoha network driver. This vulnerability arises from an issue where a variable (ndesc) is initialized too early in the airoha_qdma_init_tx_queue routine. If a queue entry list allocation fails, this premature initialization can lead to a NULL pointer dereference, which could allow a local attacker to trigger a system crash. This results in a Denial of Service (DoS), making the system unavailable.