CVE-2026-74265None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID_QUEUE_ID mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj()) until mana_create_wq_obj() assigns the f…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
net: mana: initialize gdma queue id to INVALID_QUEUE_ID
mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj()) until mana_create_wq_obj() assigns the firmware-returned id. If creation fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing gc->cq_table[0] and silently breaking whichever real CQ owns that slot.
Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then short-circuits cleanly.
Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 372e7318af379eee29ab6e60848ce7d7db76c85aLinux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < c6662f3ad1c7c3549a1c39545651833220b0de89Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 8e52a247d9aa979d43eb9ff1e445b9b3bf229d4dLinux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < a493cbb6b11acd4adc93397a4b12bd460d47620dLinux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 62ce489acb428a936bdf243e7b92b3eb341447cfLinux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 150590d9ab0dbeb0087193058363819d4c82a00fLinux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 5985474e1cb4034680fac2145497a94b0860be50Linux 5.13Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses