Unrated severityNVD Advisory· Published Jul 19, 2026· Updated Jul 27, 2026

CVE-2026-63859

Description

In the Linux kernel, the following vulnerability has been resolved:

net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue()

Similar to airoha_qdma_cleanup_rx_queue(), reset DMA TX descriptors in airoha_qdma_cleanup_tx_queue routine. Moreover, reset TX_DMA_IDX to TX_CPU_IDX to notify the NIC the QDMA TX ring is empty.

Affected products

Google/Android SDKinferred
Linux/Kernelllm-fuzzy
osv-coords
pkg:linux/kernel
Range: >= 6.11.0, < 6.18.33

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/3309965fe44c00fd65af7cef5016e9e782c021a7nvd
git.kernel.org/stable/c/9b5d56fe389d68ede080c716e6f10895facaf7dbnvd
git.kernel.org/stable/c/c0cfce4d76702dba9601a4020df1a0bc35806efcnvd

News mentions

Linux Kernel: 25 Vulnerabilities Across Subsystems Disclosed Together
Vypr Intelligence · Jul 20, 2026
Linux Kernel: 17 Vulnerabilities Across Subsystems Disclosed and Patched Together
Vypr Intelligence · Jul 20, 2026

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000