CVE-2026-64018

In the Linux kernel, the following vulnerability has been resolved:

net: mana: validate rxreqidx to prevent out-of-bounds array access

In manahwcrxeventhandler(), rxreqidx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rxreqidx, which can lead to an out-of-bounds access into reqs[].

Add bounds check on rxreqidx in manahwcrxeventhandler() before using it to index the reqs[] array.