CVE-2026-74265 net: mana: initialize gdma queue id to INVALID_QUEUE_ID
A flaw in the Linux kernel's MANA network driver allows a local attacker to cause a denial of service by triggering a cleanup path that corrupts queue table entries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-74265?
CVE-2026-74265 is a vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: mana: initialize gdma queue id to INVALID_QUEUE_ID
mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj()) until mana_create_wq_obj() assigns the firmware-returned id. If creation fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing gc->cq_table[0] and silently breaking whichever real CQ owns that slot.
Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then short-circuits cleanly.
Which versions are affected by CVE-2026-74265?
How do I fix CVE-2026-74265?
Apply the vendor's patch.
Is CVE-2026-74265 being exploited?
There is no known exploitation of CVE-2026-74265 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-74265, DEBIAN-CVE-2026-74265, GHSA-3qw4-v9v4-3ww5, UBUNTU-CVE-2026-74265.