CVE-2026-74265

A flaw was found in the mana network driver of the Linux kernel. When creating a General DMA (GDMA) queue, the queue->id may not be properly initialized. If the queue creation fails before a valid ID is assigned, a subsequent cleanup operation can incorrectly use a zero ID, potentially corrupting the Completion Queue (CQ) table. This could lead to system instability or a denial of service.

This vulnerability is rated Low impact for Red Hat Enterprise Linux because exploitation requires local access on instances utilizing Microsoft Azure Network Adapter (MANA) hardware and only triggers during specific hardware queue initialization failures. In typical enterprise deployments, the MANA driver is exclusively loaded on virtual machines running within Azure environments that have accelerated networking configured. Even when present, triggering the flaw relies on an allocation or setup error before an identifier is assigned, limiting the blast radius to internal queue state disruption without exposing data or allowing code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.