CVE-2026-53297CWE-476

CVE-2026-53297

Medium · published June 27, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Guard mana_remove against double invocation

If PM resume fails (e.g., mana_attach() returns an error), mana_probe()

calls mana_remove(), which tears down the device and sets

gd->gdma_context = NULL and gd->driver_data = NULL.

However, a failed resume callback does not automatically unbind the

driver. When the device is eventually unbound, mana_remove() is invoked

a second time. Without a NULL check, it dereferences gc->dev with

gc == NULL, causing a kernel panic.

Add an early return if gdma_context or driver_data is NULL so the second

invocation is harmless. Move the dev = gc->dev assignment after the

guard so it cannot dereference NULL.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-06-27T00:17Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 6.18.336.18.33
linux/linux_kernel≥ 6.19, < 7.0.107.0.10
References (5)
EPSS history
Timeline
  • 26 JUN 19:40Z
    net: mana: Guard mana_remove against double invocation
    cvelistv5