CVE-2026-74265

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-08-15 Modified: 2026-11-06 First seen: 2026-11-06 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID_QUEUE_ID mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj()) until mana_create_wq_obj() assigns the firmware-returned id. If creation fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing gc->cq_table[0] and silently breaking whichever real CQ owns that slot. Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then short-circuits cleanly.

Affected Software (8)

VendorProductVersion
Linux Linux ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 372e7318af379eee29ab6e60848ce7d7db76c85a
Linux Linux ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < c6662f3ad1c7c3549a1c39545651833220b0de89
Linux Linux ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d
Linux Linux ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < a493cbb6b11acd4adc93397a4b12bd460d47620d
Linux Linux ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 62ce489acb428a936bdf243e7b92b3eb341447cf
Linux Linux ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 150590d9ab0dbeb0087193058363819d4c82a00f
Linux Linux ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 5985474e1cb4034680fac2145497a94b0860be50
Linux Linux 5.13

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.21%
Raw Score 0.002150
Percentile 12.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00215
2026-11-12
0.00215
2026-11-10
0.00215
2026-11-09
0.00215
2026-11-08
0.00215
2026-11-07
0.00215
2026-11-06
0.00215

Intelligence Sources

mitre ref →
nvd ref →