CVE-2026-72064

Received Received - Intake

net: mana DMA sync issue in Linux kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when frag_count is greater than 1. In that case the buffers remain DMA mapped by page pool and the RX completion path does not call dma_unmap_single(). As a result, the implicit sync-for-CPU normally performed by dma_unmap_single() is missing before the packet data is passed to the networking stack. This breaks RX on configurations which require explicit DMA syncing, for example when booted with swiotlb=force. Fix this by recording the page pool page and DMA sync offset when the RX buffer is allocated, and syncing the received packet range for CPU access before handing the RX buffer to the stack.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72064

EUVD

EUVD-2026-59022

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability affects the Linux kernel's MANA network driver. It occurs when RX buffers are allocated from page pool fragments with a frag_count greater than 1. The issue is that the DMA mapping is not properly synced for CPU access before the packet data reaches the networking stack. This breaks RX functionality on systems requiring explicit DMA syncing, such as when booted with swiotlb=force.

Detection Guidance

This vulnerability affects the Linux kernel's MANA network driver and may cause RX failures when DMA syncing is required. Detection involves checking kernel logs for RX errors or failures in the MANA driver. Use commands like dmesg | grep mana or journalctl -k | grep mana to inspect driver logs for errors.

Impact Analysis

If you use a Linux system with the MANA network driver and boot with swiotlb=force or similar configurations requiring explicit DMA syncing, this vulnerability could cause network RX failures. This may lead to packet loss, network connectivity issues, or degraded performance on affected systems.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel networking issue related to DMA mapping and RX buffer handling, which could impact system stability or performance but does not involve data privacy or security controls typically governed by these regulations.

Mitigation Strategies

Apply the kernel patch that resolves this issue. Update your Linux kernel to a version containing the fix. If immediate patching is not possible, avoid using configurations requiring explicit DMA syncing, such as swiotlb=force.

Hi! I’m here to help you understand CVE-2026-72064. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70