In the Linux kernel, the following vulnerability has been resolved:
net: mana: Sync page pool RX frags for CPU
MANA allocates RX buffers from page pool fragments when frag_count is greater than 1. In that case the buffers remain DMA mapped by page pool and the RX completion path does not call dma_unmap_single(). As a result, the implicit sync-for-CPU normally performed by dma_unmap_single() is missing before the packet data is passed to the networking stack.
This breaks RX on configurations which require explicit DMA syncing, for example when booted with swiotlb=force.
Fix this by recording the page pool page and DMA sync offset when the RX buffer is allocated, and syncing the received packet range for CPU access before handing the RX buffer to the stack.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Aug 19, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1014-oemUpgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1013-aws-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-34-realtimeUpgrade linux-image-oem-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-generic-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1012-oracleUpgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-1020-raspiUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-34-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-azureUpgrade linux-image-aws-7.0Upgrade linux-image-genericUpgrade linux-image-6.8.0-1069-azure-fipsUpgrade linux-image-7.0.0-1020-raspi-realtimeUpgrade linux-image-7.0.0-1007-gkeUpgrade linux-image-6.8.0-1070-azureUpgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-34-genericUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-ibmUpgrade linux-image-ibm-7.0Upgrade linux-image-raspiUpgrade linux-image-7.0.0-1013-gcpUpgrade linux-image-7.0.0-1013-awsUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-awsUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-7.0.0-1014-ibmUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1012-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-gcpUpgrade linux-image-7.0.0-1007-gke-64kUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-34-realtime-64kUpgrade linux-image-7.0.0-1013-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1068-azure-fde | Sep 24, 2026 | Aug 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub