What is CVE-2026-53298?

CVE-2026-53298 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, classified as a NULL Pointer Dereference flaw (CWE-476), affecting Linux kernel versions from 6.11 onward and patched in 6.12.91, 6.18.33, 7.0.10 and others. CVE-2026-53298 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53298?

CVE-2026-53298 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2026-53298?

Yes, CVE-2026-53298 has been patched. Fixed versions include 6.12.91, 6.18.33, 7.0.10 and others. If you are running Linux kernel 6.11 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-53298 actively exploited?

CVE-2026-53298 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is NULL Pointer Dereference (CWE-476)?

The product dereferences a pointer that it expects to be valid but is NULL, typically causing a crash. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/476.html

CVE-2026-53298

Medium

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() If queue entry or DMA descriptor list allocation fails in airoha_qdma_init_rx_queue routine, airoha_qdma_cleanup() will trigger a NULL pointer dereference running netif_napi_del() for RX queue NAPIs since netif_napi_add() has never been executed to this particular RX NAPI. The issue is due to the early ndesc initialization in airoha_qdma_init_rx_queue() since airoha_qdma_cleanup() relies on ndesc value to check if the queue is properly initialized. Fix the issue moving ndesc initialization at end of airoha_qdma_init_tx routine. Move page_pool allocation after descriptor list allocation in order to avoid memory leaks if desc allocation fails.

Package Linux Kernel

Published 2026-06-26

Last modified 2026-07-08

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-476

CVE-2026-53298 is a NULL Pointer Dereference vulnerability

What is NULL Pointer Dereference?

The product dereferences a pointer that it expects to be valid but is NULL, typically causing a crash. Learn more on MITRE CWE

Affected versions

Linux kernel versions 6.11 and later are affected. Fixed in 6.12.91, 6.18.33, 7.0.10, 7.1 and their respective stable series.

Affected from

≥ 6.11

Fixed in

✓ 6.12.91 6.12.x ✓ 6.18.33 6.18.x ✓ 7.0.10 7.0.x ✓ 7.1

References

4 total

Kernel Git
https://git.kernel.org/stable/c/14dc48e5ba73d5c69559bf1a1a6884f7843aade7

Patch
Kernel Git
https://git.kernel.org/stable/c/379050947a1828826ad7ea50c95245a56929b35a

Patch
Kernel Git
https://git.kernel.org/stable/c/4d4acfa348a1d8c0941004823662ede0fdb5dea5

Patch
Kernel Git
https://git.kernel.org/stable/c/d36be272adda7f313e39dd118086955d993bf6a7

Patch

Details

CVE ID CVE-2026-53298

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2026-06-26

Modified 2026-07-08

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-53298?

CVE-2026-53298 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as a NULL Pointer Dereference flaw (CWE-476) . It affects Linux kernel versions from 6.11 onward and has been patched in 6.12.91, 6.18.33, 7.0.10 and others. CVE-2026-53298 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-53298?

CVE-2026-53298 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2026-53298?

Yes. CVE-2026-53298 has been patched. Fixed versions include 6.12.91, 6.18.33, 7.0.10 and others. If you are running Linux kernel 6.11 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-53298 actively exploited?

No. CVE-2026-53298 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.