PT-2026-72701
CVE-2026-74265
·
Published
2026-06-08
·
Updated
2026-10-13
Description by
CVSS 2.0
6.8
MediumMetricsAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the mana network driver where the
mana gd create mana wq cq() function fails to properly initialize the queue->id variable, leaving it as 0. If the creation process fails before mana create wq obj() assigns a firmware-returned ID, the cleanup process invokes the mana gd destroy cq() function with an ID of 0. This action incorrectly nulls the gc->cq table[0] entry, which can disrupt the operation of the actual Completion Queue (CQ) assigned to that slot.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾