CVE-2026-53297
kernel: net: mana: Guard mana_remove against double invocation
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 26, 2026
Updated · July 8, 2026
Description
A flaw was found in the Linux kernel's mana network driver. This vulnerability occurs when the mana_remove function is invoked a second time without proper checks after a power management (PM) resume failure and subsequent driver unbinding. A local attacker could exploit this double invocation to cause a kernel panic, leading to a Denial of Service (DoS) on the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition