In the Linux kernel, the following vulnerability has been resolved:
net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()
If queue entry or DMA descriptor list allocation fails in airoha_qdma_init_rx_queue routine, airoha_qdma_cleanup() will trigger a NULL pointer dereference running netif_napi_del() for RX queue NAPIs since netif_napi_add() has never been executed to this particular RX NAPI. The issue is due to the early ndesc initialization in airoha_qdma_init_rx_queue() since airoha_qdma_cleanup() relies on ndesc value to check if the queue is properly initialized. Fix the issue moving ndesc initialization at end of airoha_qdma_init_tx routine. Move page_pool allocation after descriptor list allocation in order to avoid memory leaks if desc allocation fails.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-64kUpgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-awsUpgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-nvidia-bosUpgrade linux-image-azureUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-raspiUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-gke-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-nvidia-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-virtual-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-generic-7.0Upgrade linux-image-gcpUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-gkeUpgrade linux-image-7.0.0-1009-azure-fde | Jul 20, 2026 | Jun 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub