CVE-2026-74265

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74265
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74265.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74265
Downstream
Published
2026-08-15T05:57:40Z
Modified
2026-08-18T03:31:02Z
Summary
net: mana: initialize gdma queue id to INVALID_QUEUE_ID
Details

In the Linux kernel, the following vulnerability has been resolved:

net: mana: initialize gdma queue id to INVALID_QUEUE_ID

mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj()) until mana_create_wq_obj() assigns the firmware-returned id. If creation fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing gc->cq_table[0] and silently breaking whichever real CQ owns that slot.

Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then short-circuits cleanly.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74265.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f
Fixed
372e7318af379eee29ab6e60848ce7d7db76c85a
Fixed
c6662f3ad1c7c3549a1c39545651833220b0de89
Fixed
8e52a247d9aa979d43eb9ff1e445b9b3bf229d4d
Fixed
a493cbb6b11acd4adc93397a4b12bd460d47620d
Fixed
62ce489acb428a936bdf243e7b92b3eb341447cf
Fixed
150590d9ab0dbeb0087193058363819d4c82a00f
Fixed
5985474e1cb4034680fac2145497a94b0860be50

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74265.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74265.json"