CVE-2026-52983

net: airoha: fix BQL imbalance in TX path

State: Published
Severity: 7.5 High
Published: Jun 24, 2026
Updated: Oct 21, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: airoha: fix BQL imbalance in TX path

Fix a possible BQL imbalance in airoha_dev_xmit(), where inflight packets are accounted only for the AIROHA_NUM_TX_RING netdev TX queues. The queue index is computed as:

qid = skb_get_queue_mapping(skb) % ARRAY_SIZE(qdma->q_tx) txq = netdev_get_tx_queue(dev, qid);

However, airoha_qdma_tx_napi_poll() accounts completions across all netdev TX queues (num_tx_queues), leading to inconsistent BQL accounting.

Also reset all netdev TX queues in the ndo_stop callback.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ca24fcac1daaa5e8a667981d81986a3eb4b9fb04 to before fcd6a3bb48bb661876c2743e89f0a6567f5cea2cAffected 1d304174106c93ce05f6088813ad7203b3eb381a to before aaad53a55812acd2355c0e5478896381e78b0110Affected 1d304174106c93ce05f6088813ad7203b3eb381a to before ded2694247a55a16d0ebbe2d6f9139305c21457aAffected 1d304174106c93ce05f6088813ad7203b3eb381a to before 2d9f5a118205da2683ffcec78b9347f1f01a820eAffected 6.12.91 to before 6.12.114Affected
LinuxLinux	6.13Affected before 6.13Not affected 6.12.114 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

ca24fcac1daaa5e8a667981d81986a3eb4b9fb04 to before fcd6a3bb48bb661876c2743e89f0a6567f5cea2cAffected
1d304174106c93ce05f6088813ad7203b3eb381a to before aaad53a55812acd2355c0e5478896381e78b0110Affected
1d304174106c93ce05f6088813ad7203b3eb381a to before ded2694247a55a16d0ebbe2d6f9139305c21457aAffected
1d304174106c93ce05f6088813ad7203b3eb381a to before 2d9f5a118205da2683ffcec78b9347f1f01a820eAffected
6.12.91 to before 6.12.114Affected

LinuxLinux

6.13Affected
before 6.13Not affected
6.12.114 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.