{"id":"CVE-2026-53324","title":"net: mana: Use pci_name() for debugfs directory naming","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: Use pci_name() for debugfs directory naming\n\nUse pci_name(pdev) for the per-device debugfs directory instead of\nhardcoded \"0\" for PFs and pci_slot_name(pdev-…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 6607c17c6c5e029da03a90085db22daf518232bf < 34dbd7b819544c99c9d96b400fe4db613f40ac4b","Linux >= 6607c17c6c5e029da03a90085db22daf518232bf < 9211eb97e8f8c28bf9313ab97862d143dbbbef97","Linux >= 6607c17c6c5e029da03a90085db22daf518232bf < c116f07ab9d22bb6f355f3cf9e44c1e6a47fe559","Linux 6.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:27:05.858609Z"},"published":"2026-06-26","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:34:21.136Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53324","references":[{"url":"https://git.kernel.org/stable/c/34dbd7b819544c99c9d96b400fe4db613f40ac4b"},{"url":"https://git.kernel.org/stable/c/9211eb97e8f8c28bf9313ab97862d143dbbbef97"},{"url":"https://git.kernel.org/stable/c/c116f07ab9d22bb6f355f3cf9e44c1e6a47fe559"}],"tags":["cve.org"],"epss":0.0016,"epssPercentile":0.05202,"ingestedAt":"2026-11-06T16:57:43.243Z","slug":"CVE-2026-53324","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: Use pci_name() for debugfs directory naming\n\nUse pci_name(pdev) for the per-device debugfs directory instead of\nhardcoded \"0\" for PFs and pci_slot_name(pdev->slot) for VFs. The\nprevious approach had two issues:\n\n1. pci_slot_name() dereferences pdev->slot, which can be NULL for VFs\n   in environments like generic VFIO passthrough or nested KVM,\n   causing a NULL pointer dereference.\n\n2. Multiple PFs would all use \"0\", and VFs across different PCI\n   domains or buses could share the same slot name, leading to\n   -EEXIST errors from debugfs_create_dir().\n\npci_name(pdev) returns the unique BDF address, is always valid, and is\nunique across the system.\n\n## Affected\n\n- `Linux >= 6607c17c6c5e029da03a90085db22daf518232bf < 34dbd7b819544c99c9d96b400fe4db613f40ac4b`\n- `Linux >= 6607c17c6c5e029da03a90085db22daf518232bf < 9211eb97e8f8c28bf9313ab97862d143dbbbef97`\n- `Linux >= 6607c17c6c5e029da03a90085db22daf518232bf < c116f07ab9d22bb6f355f3cf9e44c1e6a47fe559`\n- `Linux 6.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}