PT-2026-52936 · Undefined · Undefined
Publicado
2026-06-26
·
Atualizado
2026-06-26
·
CVE-2026-53297
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Guard mana remove against double invocation
If PM resume fails (e.g., mana attach() returns an error), mana probe()
calls mana remove(), which tears down the device and sets
gd->gdma context = NULL and gd->driver data = NULL.
However, a failed resume callback does not automatically unbind the
driver. When the device is eventually unbound, mana remove() is invoked
a second time. Without a NULL check, it dereferences gc->dev with
gc == NULL, causing a kernel panic.
Add an early return if gdma context or driver data is NULL so the second
invocation is harmless. Move the dev = gc->dev assignment after the
guard so it cannot dereference NULL.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Undefined