In the Linux kernel, the following vulnerability has been resolved:
net: airoha: fix BQL imbalance in TX path
Fix a possible BQL imbalance in airoha_dev_xmit(), where inflight packets are accounted only for the AIROHA_NUM_TX_RING netdev TX queues. The queue index is computed as:
qid = skb_get_queue_mapping(skb) % ARRAY_SIZE(qdma->q_tx) txq = netdev_get_tx_queue(dev, qid);
However, airoha_qdma_tx_napi_poll() accounts completions across all netdev TX queues (num_tx_queues), leading to inconsistent BQL accounting.
Also reset all netdev TX queues in the ndo_stop callback.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-genericUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-oem-24.04dUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-virtual-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-oem-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-generic-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-bosUpgrade linux-image-generic-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-azureUpgrade linux-image-aws-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-azure-fdeUpgrade linux-image-realtime-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-realtime-64k-hwe-26.04 | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub