CVE-2026-53298

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the airoha qdma init rx queue() function when queue entry or DMA descriptor list allocation fails. This happens because the ndesc variable is initialized too early, leading airoha qdma cleanup() to incorrectly assume the queue is initialized and attempt to run netif napi del() for RX queue NAPIs that were never added via netif napi add(). Additionally, a memory leak can occur if page pool allocation happens before descriptor list allocation and the latter fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.