{"id":"CVE-2026-74265","title":"net: mana: initialize gdma queue id to INVALID_QUEUE_ID","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: initialize gdma queue id to INVALID_QUEUE_ID\n\nmana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj())\nuntil mana_create_wq_obj() assigns the f…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 372e7318af379eee29ab6e60848ce7d7db76c85a","Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < c6662f3ad1c7c3549a1c39545651833220b0de89","Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d","Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < a493cbb6b11acd4adc93397a4b12bd460d47620d","Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 62ce489acb428a936bdf243e7b92b3eb341447cf","Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 150590d9ab0dbeb0087193058363819d4c82a00f","Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 5985474e1cb4034680fac2145497a94b0860be50","Linux 5.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:55:42.948657Z"},"published":"2026-08-15","updated":"2026-11-06","sourceUpdated":"2026-11-06T17:05:43.181Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74265","references":[{"url":"https://git.kernel.org/stable/c/372e7318af379eee29ab6e60848ce7d7db76c85a"},{"url":"https://git.kernel.org/stable/c/c6662f3ad1c7c3549a1c39545651833220b0de89"},{"url":"https://git.kernel.org/stable/c/8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d"},{"url":"https://git.kernel.org/stable/c/a493cbb6b11acd4adc93397a4b12bd460d47620d"},{"url":"https://git.kernel.org/stable/c/62ce489acb428a936bdf243e7b92b3eb341447cf"},{"url":"https://git.kernel.org/stable/c/150590d9ab0dbeb0087193058363819d4c82a00f"},{"url":"https://git.kernel.org/stable/c/5985474e1cb4034680fac2145497a94b0860be50"}],"tags":["cve.org"],"epss":0.00215,"epssPercentile":0.11897,"ingestedAt":"2026-11-06T18:00:12.566Z","slug":"CVE-2026-74265","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: initialize gdma queue id to INVALID_QUEUE_ID\n\nmana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj())\nuntil mana_create_wq_obj() assigns the firmware-returned id. If creation\nfails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing\ngc->cq_table[0] and silently breaking whichever real CQ owns that slot.\n\nInitialize queue->id to INVALID_QUEUE_ID right after allocation, matching\nmana_gd_create_eq(). The existing (id >= max_num_cqs) guard then\nshort-circuits cleanly.\n\n## Affected\n\n- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 372e7318af379eee29ab6e60848ce7d7db76c85a`\n- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < c6662f3ad1c7c3549a1c39545651833220b0de89`\n- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d`\n- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < a493cbb6b11acd4adc93397a4b12bd460d47620d`\n- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 62ce489acb428a936bdf243e7b92b3eb341447cf`\n- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 150590d9ab0dbeb0087193058363819d4c82a00f`\n- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 5985474e1cb4034680fac2145497a94b0860be50`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}