---
id: CVE-2026-74265
title: 'net: mana: initialize gdma queue id to INVALID_QUEUE_ID'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: mana: initialize gdma queue id to INVALID_QUEUE_ID

  mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj())
  until mana_create_wq_obj() assigns the f…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f <
    372e7318af379eee29ab6e60848ce7d7db76c85a
  - >-
    Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f <
    c6662f3ad1c7c3549a1c39545651833220b0de89
  - >-
    Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f <
    8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d
  - >-
    Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f <
    a493cbb6b11acd4adc93397a4b12bd460d47620d
  - >-
    Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f <
    62ce489acb428a936bdf243e7b92b3eb341447cf
  - >-
    Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f <
    150590d9ab0dbeb0087193058363819d4c82a00f
  - >-
    Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f <
    5985474e1cb4034680fac2145497a94b0860be50
  - Linux 5.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:55:42.948657Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T17:05:43.181Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-74265'
references:
  - url: 'https://git.kernel.org/stable/c/372e7318af379eee29ab6e60848ce7d7db76c85a'
  - url: 'https://git.kernel.org/stable/c/c6662f3ad1c7c3549a1c39545651833220b0de89'
  - url: 'https://git.kernel.org/stable/c/8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d'
  - url: 'https://git.kernel.org/stable/c/a493cbb6b11acd4adc93397a4b12bd460d47620d'
  - url: 'https://git.kernel.org/stable/c/62ce489acb428a936bdf243e7b92b3eb341447cf'
  - url: 'https://git.kernel.org/stable/c/150590d9ab0dbeb0087193058363819d4c82a00f'
  - url: 'https://git.kernel.org/stable/c/5985474e1cb4034680fac2145497a94b0860be50'
tags:
  - cve.org
epss: 0.00215
epssPercentile: 0.11897
ingestedAt: '2026-11-06T18:00:12.566Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: mana: initialize gdma queue id to INVALID_QUEUE_ID

mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj())
until mana_create_wq_obj() assigns the firmware-returned id. If creation
fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing
gc->cq_table[0] and silently breaking whichever real CQ owns that slot.

Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching
mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then
short-circuits cleanly.

## Affected

- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 372e7318af379eee29ab6e60848ce7d7db76c85a`
- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < c6662f3ad1c7c3549a1c39545651833220b0de89`
- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d`
- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < a493cbb6b11acd4adc93397a4b12bd460d47620d`
- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 62ce489acb428a936bdf243e7b92b3eb341447cf`
- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 150590d9ab0dbeb0087193058363819d4c82a00f`
- `Linux >= ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f < 5985474e1cb4034680fac2145497a94b0860be50`
- `Linux 5.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.