The Linux kernel airoha network driver contained a vulnerability where if the allocation of the queue entry list failed during the airoha_qdma_init_tx_queue routine, the cleanup function airoha_qdma_cleanup_tx_queue would dereference a NULL pointer when accessing the queue entry array. This was caused by initializing the ndesc variable too early in the initialization process. The fix involved moving the ndesc initialization to the end of the airoha_qdma_init_tx routine to prevent the NULL pointer dereference.

This vulnerability results in a denial of service (DoS) condition due to a NULL pointer dereference causing a kernel crash or instability. There is no impact on confidentiality or integrity. The attack vector requires local access with low privileges and no user interaction is needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a Linux kernel vulnerability, monitor official Linux kernel releases and vendor advisories for patches addressing this issue. Until a patch is applied, avoid triggering the vulnerable code path if possible.