CVE-2026-53324

net: mana: Use pci_name() for debugfs directory naming

State
Published
Severity
Not scored
Published
Jun 26, 2026
Updated
Jun 26, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Use pci_name() for debugfs directory naming

Use pci_name(pdev) for the per-device debugfs directory instead of hardcoded "0" for PFs and pci_slot_name(pdev->slot) for VFs. The previous approach had two issues:

1. pci_slot_name() dereferences pdev->slot, which can be NULL for VFs in environments like generic VFIO passthrough or nested KVM, causing a NULL pointer dereference.

2. Multiple PFs would all use "0", and VFs across different PCI domains or buses could share the same slot name, leading to -EEXIST errors from debugfs_create_dir().

pci_name(pdev) returns the unique BDF address, is always valid, and is unique across the system.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6607c17c6c5e029da03a90085db22daf518232bf to before 34dbd7b819544c99c9d96b400fe4db613f40ac4bAffected
  • 6607c17c6c5e029da03a90085db22daf518232bf to before 9211eb97e8f8c28bf9313ab97862d143dbbbef97Affected
  • 6607c17c6c5e029da03a90085db22daf518232bf to before c116f07ab9d22bb6f355f3cf9e44c1e6a47fe559Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.