PT-2026-72701

CVE-2026-74265

·

Published

2026-06-08

·

Updated

2026-10-13

Description by

CVSS 2.0
6.8
Medium
MetricsAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the mana network driver where the mana gd create mana wq cq() function fails to properly initialize the queue->id variable, leaving it as 0. If the creation process fails before mana create wq obj() assigns a firmware-returned ID, the cleanup process invokes the mana gd destroy cq() function with an ID of 0. This action incorrectly nulls the gc->cq table[0] entry, which can disrupt the operation of the actual Completion Queue (CQ) assigned to that slot.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
SUSE-SU-2026:4282-1
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
Found an issue in the description? Have something to add? Feel free to write us 👾