CVE Explorer

CVE-2026-53299

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() If queue entry list allocation fails in airoha_qdma_init_tx_queue routine, airoha_qdma_cleanup_tx_queue() will trigger a NULL pointer dereference accessing the queue entry array. The issue is due to the early ndesc initialization in airoha_qdma_init_tx_queue(). Fix the issue moving ndesc initialization at end of airoha_qdma_init_tx routine.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a2d21f7177fb2ed3f1e8066d45afe49369e90af6cf5a7d68b0f882e9e7f42b57

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/airoha/airoha_eth.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.19"},{"lessThan":"6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:edab64e2b60ee295e12572ecc97022a7a1617efbf343f7cf93b8400a09d91823 · sha256:21ec4dfbf429379c… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/airoha/airoha_eth.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"90619fdedfb9cc8a80f217d882ee7a84d3703e72","status":"affected","version":"ad02cb61c52cae5afa3e2de6adbb49ad884c26e9","versionType":"git"},{"lessThan":"ece31f9dae0c3cd3277e66667e7b8ab2577cf34a","status":"affected","version":"3f47e67dff1f7266e112c50313d63824f6f17102","versionType":"git"},{"lessThan":"f329924bb49458c65297f1361f545816a5b90998","status":"affected","version":"3f47e…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:edab64e2b60ee295e12572ecc97022a7a1617efbf343f7cf93b8400a09d91823 · sha256:21ec4dfbf429379c… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:edab64e2b60ee295e12572ecc97022a7a1617efbf343f7cf93b8400a09d91823 · sha256:21ec4dfbf429379c… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:edab64e2b60ee295e12572ecc97022a7a1617efbf343f7cf93b8400a09d91823 · sha256:21ec4dfbf429379c… · /containers/cna/affected/0

Source references

3 source assertions

{"url":"https://git.kernel.org/stable/c/90619fdedfb9cc8a80f217d882ee7a84d3703e72"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:edab64e2b60ee295e12572ecc97022a7a1617efbf343f7cf93b8400a09d91823 · sha256:21ec4dfbf429379c… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/ece31f9dae0c3cd3277e66667e7b8ab2577cf34a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:edab64e2b60ee295e12572ecc97022a7a1617efbf343f7cf93b8400a09d91823 · sha256:21ec4dfbf429379c… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/f329924bb49458c65297f1361f545816a5b90998"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:edab64e2b60ee295e12572ecc97022a7a1617efbf343f7cf93b8400a09d91823 · sha256:21ec4dfbf429379c… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer