The Linux kernel's airoha network driver had a BQL imbalance vulnerability in the TX path. Specifically, the function airoha_dev_xmit() accounted inflight packets only for AIROHA_NUM_TX_RING TX queues, using a queue index derived from skb_get_queue_mapping(skb) modulo the size of the qdma transmit queue array. However, the completion function airoha_qdma_tx_napi_poll() accounted completions across all netdev TX queues (num_tx_queues), causing inconsistent BQL accounting. This mismatch could lead to resource mismanagement in the network transmission path. The fix involved aligning the accounting logic and resetting all TX queues in the ndo_stop callback to ensure consistent BQL state.

The vulnerability does not impact confidentiality or integrity but affects availability by causing a high impact on network transmission due to BQL imbalance. This could lead to degraded network performance or denial of service conditions on affected systems running the vulnerable Linux kernel versions.

A fix is available that resolves the BQL imbalance in the airoha network driver by correcting the accounting logic and resetting all TX queues during the network device stop callback. Users should update to Linux kernel versions 7.0.0-28.28.1 or later where this issue is resolved. No additional mitigations are indicated by the vendor advisory.