CVE-2026-53298

net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()

published June 26, 2026

CVSS
—
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()

If queue entry or DMA descriptor list allocation fails in

airoha_qdma_init_rx_queue routine, airoha_qdma_cleanup() will trigger a

NULL pointer dereference running netif_napi_del() for RX queue NAPIs

since netif_napi_add() has never been executed to this particular RX NAPI.

The issue is due to the early ndesc initialization in

airoha_qdma_init_rx_queue() since airoha_qdma_cleanup() relies on ndesc

value to check if the queue is properly initialized. Fix the issue moving

ndesc initialization at end of airoha_qdma_init_tx routine.

Move page_pool allocation after descriptor list allocation in order to

avoid memory leaks if desc allocation fails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-06-26T19:40Z
EPSS history
Timeline
  • 26 JUN 19:40Z
    net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()
    cvelistv5