{"id":"CVE-2026-74265","summary":"net: mana: initialize gdma queue id to INVALID_QUEUE_ID","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: initialize gdma queue id to INVALID_QUEUE_ID\n\nmana_gd_create_mana_wq_cq() leaves queue-\u003eid as 0 (from kzalloc_obj())\nuntil mana_create_wq_obj() assigns the firmware-returned id. If creation\nfails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing\ngc-\u003ecq_table[0] and silently breaking whichever real CQ owns that slot.\n\nInitialize queue-\u003eid to INVALID_QUEUE_ID right after allocation, matching\nmana_gd_create_eq(). The existing (id \u003e= max_num_cqs) guard then\nshort-circuits cleanly.","modified":"2026-08-18T03:31:02.067067309Z","published":"2026-08-15T05:57:40.976Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74265.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/150590d9ab0dbeb0087193058363819d4c82a00f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/372e7318af379eee29ab6e60848ce7d7db76c85a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5985474e1cb4034680fac2145497a94b0860be50"},{"type":"WEB","url":"https://git.kernel.org/stable/c/62ce489acb428a936bdf243e7b92b3eb341447cf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a493cbb6b11acd4adc93397a4b12bd460d47620d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c6662f3ad1c7c3549a1c39545651833220b0de89"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74265.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74265"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f"},{"fixed":"372e7318af379eee29ab6e60848ce7d7db76c85a"},{"fixed":"c6662f3ad1c7c3549a1c39545651833220b0de89"},{"fixed":"8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d"},{"fixed":"a493cbb6b11acd4adc93397a4b12bd460d47620d"},{"fixed":"62ce489acb428a936bdf243e7b92b3eb341447cf"},{"fixed":"150590d9ab0dbeb0087193058363819d4c82a00f"},{"fixed":"5985474e1cb4034680fac2145497a94b0860be50"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74265.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.13.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74265.json"}}],"schema_version":"1.9.0"}