Linux Kernel Vulnerability in Mana Driver Affecting DebugFS Directory Naming

CVE-2026-53324

What is CVE-2026-53324?

The vulnerability in the Linux kernel's Mana driver pertains to the improper naming of debugfs directories, which can lead to operational inconsistencies. Previously, the use of hardcoded values for device naming created instances of NULL pointer dereference when dealing with Virtual Functions (VFs), especially in configurations such as generic VFIO passthrough or nested KVM. Additionally, multiple Physical Functions (PFs) would inadvertently share the name '0', complicating directory management and resulting in errors when creating directories. The recommended change to use pci_name(pdev) guarantees a unique and valid directory name across the system, thus preventing potential operational failures.

References