CVE-2026-97613 - net: mana: Reserve extra CQ slot for the fence completion CQE

net: mana: Reserve extra CQ slot for the fence completion CQE

Published Sep 25, 2026

No CVSS score

EPSS 0.20%

Description

The RX completion queue is sized to hold exactly one CQE per posted RX WQE. MANA_FENCE_RQ makes hardware post an additional CQE_RX_OBJECT_FENCE after the packet CQEs. The current sizing reserves no extra slot for it and in rare cases, CQ has no guaranteed slot for the fence CQE when it is full of packet CQEs. This can lead to dropping the fence completion while the driver waits holding RTNL lock throughout the timeout duration. Reserve one extra CQE slot for CQE_RX_OBJECT_FENCE. mana_gd_alloc_memory() requires queue_size to be a power-of-two and at least MANA_PAGE_SIZE; the reservation pushes cq_size past a power-of-two, so round up the CQ size in mana_create_rxq().

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.17
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.17
- Version
  6.12.111
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.18.53
  Status
  unaffected
  Constraints
  <=6.18.*
- Version
  6.6.158
  Status
  unaffected
  Constraints
  <=6.6.*
- Version
  7.2.7
  Status
  unaffected
  Constraints
  <=7.2.*
- Version
  7.3-rc3
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.17	affected	-
0	unaffected	<5.17
6.12.111	unaffected	<=6.12.*
6.18.53	unaffected	<=6.18.*
6.6.158	unaffected	<=6.6.*
7.2.7	unaffected	<=7.2.*
7.3-rc3	unaffected	<=*

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86744		Advisory
https://git.kernel.org/stable/c/1e43c407624d2111c19d4d8ffe9b2191a0ec42de
https://git.kernel.org/stable/c/62eb52454afcc1d390b8624c5d1ddc92cf382f39
https://git.kernel.org/stable/c/6c739cb89ebd6cf225dac46d2721e11927a7ead4
https://git.kernel.org/stable/c/80dd7e754b3aa9637a0758ad93fa209f9650ec48
https://git.kernel.org/stable/c/f7d76b84b9206eef4320d8ab715d65f944535acf