CVE-2026-74265

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID_QUEUE_ID mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj()) until mana_create_wq_obj() assigns the firmware-returned id. If creation fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing gc->cq_table[0] and silently breaking whichever real CQ owns that slot. Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then short-circuits cleanly.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/150590d9ab0dbeb0087193058363819d4c82a00f
https://git.kernel.org/stable/c/372e7318af379eee29ab6e60848ce7d7db76c85a
https://git.kernel.org/stable/c/5985474e1cb4034680fac2145497a94b0860be50
https://git.kernel.org/stable/c/62ce489acb428a936bdf243e7b92b3eb341447cf
https://git.kernel.org/stable/c/8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d
https://git.kernel.org/stable/c/a493cbb6b11acd4adc93397a4b12bd460d47620d
https://git.kernel.org/stable/c/c6662f3ad1c7c3549a1c39545651833220b0de89

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:22

Updated : 2026-08-17 06:19

NVD link : CVE-2026-74265

Mitre link : CVE-2026-74265

CVE.ORG link : CVE-2026-74265

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-74265", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f", "lessThan": "372e7318af379eee29ab6e60848ce7d7db76c85a", "versionType": "git"}, {"status": "affected", "version": "ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f", "lessThan": "c6662f3ad1c7c3549a1c39545651833220b0de89", "versionType": "git"}, {"status": "affected", "version": "ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f", "lessThan": "8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d", "versionType": "git"}, {"status": "affected", "version": "ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f", "lessThan": "a493cbb6b11acd4adc93397a4b12bd460d47620d", "versionType": "git"}, {"status": "affected", "version": "ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f", "lessThan": "62ce489acb428a936bdf243e7b92b3eb341447cf", "versionType": "git"}, {"status": "affected", "version": "ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f", "lessThan": "150590d9ab0dbeb0087193058363819d4c82a00f", "versionType": "git"}, {"status": "affected", "version": "ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f", "lessThan": "5985474e1cb4034680fac2145497a94b0860be50", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/microsoft/mana/gdma_main.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.13"}, {"status": "unaffected", "version": "0", "lessThan": "5.13", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.212", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.178", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/microsoft/mana/gdma_main.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:25.803", "references": [{"url": "https://git.kernel.org/stable/c/150590d9ab0dbeb0087193058363819d4c82a00f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/372e7318af379eee29ab6e60848ce7d7db76c85a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5985474e1cb4034680fac2145497a94b0860be50", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/62ce489acb428a936bdf243e7b92b3eb341447cf", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a493cbb6b11acd4adc93397a4b12bd460d47620d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c6662f3ad1c7c3549a1c39545651833220b0de89", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: initialize gdma queue id to INVALID_QUEUE_ID\n\nmana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj())\nuntil mana_create_wq_obj() assigns the firmware-returned id. If creation\nfails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing\ngc->cq_table[0] and silently breaking whichever real CQ owns that slot.\n\nInitialize queue->id to INVALID_QUEUE_ID right after allocation, matching\nmana_gd_create_eq(). The existing (id >= max_num_cqs) guard then\nshort-circuits cleanly."}], "lastModified": "2026-08-17T06:19:20.093", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}