CVE-2026-53324 is a vulnerability in Linux Kernel
Published on June 26, 2026
net: mana: Use pci_name() for debugfs directory naming
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Use pci_name() for debugfs directory naming
Use pci_name(pdev) for the per-device debugfs directory instead of
hardcoded "0" for PFs and pci_slot_name(pdev->slot) for VFs. The
previous approach had two issues:
1. pci_slot_name() dereferences pdev->slot, which can be NULL for VFs
in environments like generic VFIO passthrough or nested KVM,
causing a NULL pointer dereference.
2. Multiple PFs would all use "0", and VFs across different PCI
domains or buses could share the same slot name, leading to
-EEXIST errors from debugfs_create_dir().
pci_name(pdev) returns the unique BDF address, is always valid, and is
unique across the system.
Products Associated with CVE-2026-53324
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 6607c17c6c5e029da03a90085db22daf518232bf and below 34dbd7b819544c99c9d96b400fe4db613f40ac4b is affected.
- Version 6607c17c6c5e029da03a90085db22daf518232bf and below 9211eb97e8f8c28bf9313ab97862d143dbbbef97 is affected.
- Version 6607c17c6c5e029da03a90085db22daf518232bf and below c116f07ab9d22bb6f355f3cf9e44c1e6a47fe559 is affected.
- Version 6.13 is affected.
- Before 6.13 is unaffected.
- Version 6.18.33, <= 6.18.* is unaffected.
- Version 7.0.10, <= 7.0.* is unaffected.
- Version 7.1, <= * is unaffected.