CVE-2026-53248
The CVE-2026-53248 issue affects the Linux kernel net/airoha path where airoha_metadata_dst_free() frees metadata_dst via kfree(), bypassing the RCU grace period. In RX, skb_dst_set_noref() creates a non-refcounted pointer from skb to metadata_dst, which must remain valid until all RCU readers fi...