CVE-2026-74265

net: mana: initialize gdma queue id to INVALID_QUEUE_ID

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mana: initialize gdma queue id to INVALID_QUEUE_ID

mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj()) until mana_create_wq_obj() assigns the firmware-returned id. If creation fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing gc->cq_table[0] and silently breaking whichever real CQ owns that slot.

Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then short-circuits cleanly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 372e7318af379eee29ab6e60848ce7d7db76c85aAffected ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before c6662f3ad1c7c3549a1c39545651833220b0de89Affected ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 8e52a247d9aa979d43eb9ff1e445b9b3bf229d4dAffected ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before a493cbb6b11acd4adc93397a4b12bd460d47620dAffected ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 62ce489acb428a936bdf243e7b92b3eb341447cfAffected ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 150590d9ab0dbeb0087193058363819d4c82a00fAffected ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 5985474e1cb4034680fac2145497a94b0860be50Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 372e7318af379eee29ab6e60848ce7d7db76c85aAffected
ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before c6662f3ad1c7c3549a1c39545651833220b0de89Affected
ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 8e52a247d9aa979d43eb9ff1e445b9b3bf229d4dAffected
ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before a493cbb6b11acd4adc93397a4b12bd460d47620dAffected
ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 62ce489acb428a936bdf243e7b92b3eb341447cfAffected
ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 150590d9ab0dbeb0087193058363819d4c82a00fAffected
ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f to before 5985474e1cb4034680fac2145497a94b0860be50Affected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.