In the Linux kernel, the following vulnerability has been resolved:
net: mana: Guard mana_remove against double invocation
If PM resume fails (e.g., mana_attach() returns an error), mana_probe() calls mana_remove(), which tears down the device and sets gd->gdma_context = NULL and gd->driver_data = NULL.
However, a failed resume callback does not automatically unbind the driver. When the device is eventually unbound, mana_remove() is invoked a second time. Without a NULL check, it dereferences gc->dev with gc == NULL, causing a kernel panic.
Add an early return if gdma_context or driver_data is NULL so the second invocation is harmless. Move the dev = gc->dev assignment after the guard so it cannot dereference NULL.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 26, 2026 |
| Ubuntu | — | Upgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64k-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-virtualUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-virtual-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-26.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-gke-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-gcp-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-azureUpgrade linux-image-gke-64kUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-26.04a | Jul 20, 2026 | Jun 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub