CVE-2026-63857

In the Linux kernel, CVE-2026-63857 affects the airoha net code where the transmit loop in airoha_dev_xmit() reads fragment address/length on the last iteration (skb_shinfo(skb)->nr_frags) when the fragment data is uninitialized. The issue is unsafe reads that could trigger a page fault. The f...