CVE-2026-43056
Description
In the Linux kernel, the following vulnerability has been resolved:
net: mana: fix use-after-free in add_adev() error path
If auxiliary_device_add() fails, add_adev() jumps to add_fail and calls auxiliary_device_uninit(adev).
The auxiliary device has its release callback set to adev_release(), which frees the containing struct mana_adev. Since adev is embedded in struct mana_adev, the subsequent fall-through to init_fail and access to adev->id may result in a use-after-free.
Fix this by saving the allocated auxiliary device id in a local variable before calling auxiliary_device_add(), and use that saved id in the cleanup path after auxiliary_device_uninit().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
82cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.2,<6.6.134
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
- osv-coords76 versionspkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rv
< 4.18.0-553.136.1.el8_10+ 75 more
- (no CPE)range: < 4.18.0-553.136.1.el8_10
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 6.12.0-211.26.1.el10_2
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
- (no CPE)range: < 5.14.0-687.15.1.el9_8
Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/43f5b19fd190fea20d052bc84741b28031d5baa9nvdPatch
- git.kernel.org/stable/c/5f4061f8225d18695e5afe9bbf1cb7bd673d7872nvdPatch
- git.kernel.org/stable/c/c4ea7d8907cf72b259bf70bd8c2e791e1c4ff70fnvdPatch
- git.kernel.org/stable/c/d88541ffd56d62a61e77209080001eddd4d69815nvdPatch
- git.kernel.org/stable/c/e5a75bf026c686b91a7dc6f9c5caf5016745d1fenvdPatch
News mentions
0No linked articles in our index yet.