CVE-2026-72064net: mana: Sync page pool RX frags for CPU
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when frag_count is greater than 1. In that case the buffers remain DMA mapped by page pool and the RX completion path does not call dma_unmap_single(). As a result, the implicit sync-for-CPU normally performed by dma_unmap_single() is missing before the packet data is passed to the networking stack. This breaks RX on configurations which require explicit DMA syncing, for example when booted with swiotlb=force. Fix this by recording the page pool page and DMA sync offset when the RX buffer is allocated, and syncing the received packet range for CPU access before handing the RX buffer to the stack.
- CVSS
- 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before 845c959178ccab020b67bed7f4eae3058135ec80; from 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before bc650dd5ce6434286b96e2b26a41af81f679cc7c; from 730ff06d3f5cc2ce0348414b78c10528b767d4a3 before c72a0f09c57f92113df69f9b902d11c9e4b132f5 | CNA record |
References
- https://git.kernel.org/stable/c/845c959178ccab020b67bed7f4eae3058135ec80
- https://git.kernel.org/stable/c/bc650dd5ce6434286b96e2b26a41af81f679cc7c
- https://git.kernel.org/stable/c/c72a0f09c57f92113df69f9b902d11c9e4b132f5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.