CVE-2026-53324

net: mana: Use pci_name() for debugfs directory naming

published June 26, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Use pci_name() for debugfs directory naming

Use pci_name(pdev) for the per-device debugfs directory instead of

hardcoded "0" for PFs and pci_slot_name(pdev->slot) for VFs. The

previous approach had two issues:

1. pci_slot_name() dereferences pdev->slot, which can be NULL for VFs

in environments like generic VFIO passthrough or nested KVM,

causing a NULL pointer dereference.

2. Multiple PFs would all use "0", and VFs across different PCI

domains or buses could share the same slot name, leading to

-EEXIST errors from debugfs_create_dir().

pci_name(pdev) returns the unique BDF address, is always valid, and is

unique across the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-06-26T19:41Z
EPSS history
Timeline
  • 26 JUN 19:41Z
    net: mana: Use pci_name() for debugfs directory naming
    cvelistv5