CVE-2026-74265

CVE-2026-74265

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: mana: initialize gdma queue id to INVALID_QUEUE_ID

mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj())

until mana_create_wq_obj() assigns the firmware-returned id. If creation

fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing

gc->cq_table[0] and silently breaking whichever real CQ owns that slot.

Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching

mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then

short-circuits cleanly.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Published
2026-08-15T10:22Z
References (7)
EPSS history
Timeline
  • 15 AUG 05:57Z
    net: mana: initialize gdma queue id to INVALID_QUEUE_ID
    cvelistv5