CVE-2026-53297 PUBLISHED

net: mana: Guard mana_remove against double invocation

Assigner: Linux
Reserved: 09.06.2026 Published: 26.06.2026 Updated: 26.06.2026

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Guard mana_remove against double invocation

If PM resume fails (e.g., mana_attach() returns an error), mana_probe() calls mana_remove(), which tears down the device and sets gd->gdma_context = NULL and gd->driver_data = NULL.

However, a failed resume callback does not automatically unbind the driver. When the device is eventually unbound, mana_remove() is invoked a second time. Without a NULL check, it dereferences gc->dev with gc == NULL, causing a kernel panic.

Add an early return if gdma_context or driver_data is NULL so the second invocation is harmless. Move the dev = gc->dev assignment after the guard so it cannot dereference NULL.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 635096a86edb067d55a1e04b4a918f5c6dac0c51 to a1ddfd2c0b7a48e5239fadd2a24cc4bc2cda90e6 (excl.)
  • affected from 635096a86edb067d55a1e04b4a918f5c6dac0c51 to bbe5c3c570645a4ceb120979d3ee203a1583d775 (excl.)
  • affected from 635096a86edb067d55a1e04b4a918f5c6dac0c51 to 50271d7ec95144d26808025b508f463780517d3c (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.16 is affected
  • unaffected from 0 to 5.16 (excl.)
  • unaffected from 6.18.33 to 6.18.* (incl.)
  • unaffected from 7.0.10 to 7.0.* (incl.)
  • unaffected from 7.1 to * (incl.)

References