PT-2026-52936 · Undefined · Undefined
Published
2026-06-26
·
Updated
2026-06-26
·
CVE-2026-53297
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Guard mana remove against double invocation
If PM resume fails (e.g., mana attach() returns an error), mana probe()
calls mana remove(), which tears down the device and sets
gd->gdma context = NULL and gd->driver data = NULL.
However, a failed resume callback does not automatically unbind the
driver. When the device is eventually unbound, mana remove() is invoked
a second time. Without a NULL check, it dereferences gc->dev with
gc == NULL, causing a kernel panic.
Add an early return if gdma context or driver data is NULL so the second
invocation is harmless. Move the dev = gc->dev assignment after the
guard so it cannot dereference NULL.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined