Skip to main content
VulnerabilityPublished Updated

CVE-2026-97613: Linux kernel · net: mana: Reserve extra CQ slot for the fence completion CQE

Source GCVE Database

0
Compare
Authoritative record:CVE-2026-97613· Medium

Not known to be exploited · fixed in f7d76b84b9206eef4320d8ab715d65f944535acf : update Linux kernel when convenient.

Data as of 30 Oct 2026, 17:32 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in f7d76b84b9206eef4320d8ab715d65f944535acf, 80dd7e754b3aa9637a0758ad93fa209f9650ec48, 62eb52454afcc1d390b8624c5d1ddc92cf382f39 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 25 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 6cc74443a7732d7e93bee3d0c3704a22cc7274d9, < f7d76b84b9206eef4320d8ab715d65f944535acf
Fixed in
  • f7d76b84b9206eef4320d8ab715d65f944535acf
LinuxLinuxAffected
  • ≥ 6cc74443a7732d7e93bee3d0c3704a22cc7274d9, < 80dd7e754b3aa9637a0758ad93fa209f9650ec48
Fixed in
  • 80dd7e754b3aa9637a0758ad93fa209f9650ec48
LinuxLinuxAffected
  • ≥ 6cc74443a7732d7e93bee3d0c3704a22cc7274d9, < 62eb52454afcc1d390b8624c5d1ddc92cf382f39
Fixed in
  • 62eb52454afcc1d390b8624c5d1ddc92cf382f39
LinuxLinuxAffected
  • ≥ 6cc74443a7732d7e93bee3d0c3704a22cc7274d9, < 6c739cb89ebd6cf225dac46d2721e11927a7ead4
Fixed in
  • 6c739cb89ebd6cf225dac46d2721e11927a7ead4
LinuxLinuxAffected
  • ≥ 6cc74443a7732d7e93bee3d0c3704a22cc7274d9, < 5a41af0d906360f09527629f7d9ef4e342c58a89
Fixed in
  • 5a41af0d906360f09527629f7d9ef4e342c58a89
LinuxLinuxAffected
  • ≥ 6cc74443a7732d7e93bee3d0c3704a22cc7274d9, < 1e43c407624d2111c19d4d8ffe9b2191a0ec42de
Fixed in
  • 1e43c407624d2111c19d4d8ffe9b2191a0ec42de

AI-suggested

A fix has been implemented in the Linux kernel to reserve an extra CQE slot for the fence completion CQE and adjust the completion queue size accordingly. Users should apply the official kernel updates that include this fix once available. No additional mitigation steps are indicated.

Description

A vulnerability in the Linux kernel's net: mana driver involves insufficient reservation of completion queue (CQ) slots for fence completion CQEs. The RX completion queue is sized to hold exactly one CQE per posted RX WQE, but the hardware posts an additional CQE for fence completion which is not accounted for, potentially causing the fence CQE to be dropped. This can lead to the driver waiting while holding the RTNL lock for the duration of a timeout.

References

Community reviews

Loading reviews…