CVE-2026-63857
kernel: net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's airoha network driver. The transmit function airoha_dev_xmit() attempts to read uninitialized memory during its final processing loop. This unsafe memory access may lead to a system crash, resulting in a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-824 · Access of Uninitialized Pointer