NULL Pointer Dereference Vulnerability in Linux Kernel Airoha Driver

CVE-2026-53299

What is CVE-2026-53299?

A vulnerability exists in the Linux kernel's airoha driver due to incorrect initialization of the ndesc variable. This flaw can result in a NULL pointer dereference when the queue entry list allocation fails during the airoha_qdma_init_tx_queue routine. The affected code requires the ndesc initialization to be moved to the end of the airoha_qdma_init_tx routine to prevent potential crashes and enhance system reliability.

References