CVE-2026-74265

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: mana: initialize gdma queue id to INVALID_QUEUE_ID

mana_gd_create_mana_wq_cq() leaves queue->id as 0 (from kzalloc_obj())

until mana_create_wq_obj() assigns the firmware-returned id. If creation

fails before that, cleanup calls mana_gd_destroy_cq() with id 0, NULLing

gc->cq_table[0] and silently breaking whichever real CQ owns that slot.

Initialize queue->id to INVALID_QUEUE_ID right after allocation, matching

mana_gd_create_eq(). The existing (id >= max_num_cqs) guard then

short-circuits cleanly.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References