CVE-2026-53338

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the airoha qdma init hfwd queues() function. This happens because the of reserved mem lookup() function may return NULL if the reserved memory region referenced by the memory-region phandle is missing from the reserved memory table, which can be caused by a removed memory-region node or a misconfigured Device Tree Source (DTS). The system fails to verify the returned pointer before accessing rmem->base and rmem->size, leading to a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.