Executive brief
A vulnerability was identified in the Linux kernel's Microsoft Azure Network Adapter (MANA) driver. This flaw could allow a local user to cause a system crash or potentially execute unauthorized actions by triggering a specific error during the network hardware setup process. This impact primarily affects the stability and availability of systems using this specific high-performance networking hardware.
Technical details
A use-after-free (UAF) vulnerability exists in the net/mana driver within the mana_gd_setup() function. When a setup error occurs, the driver calls destroy_workqueue() on the service_wq pointer but fails to set the pointer to NULL. If a subsequent cleanup or check occurs (such as in mana_gd_cleanup()), the kernel may attempt to access or destroy the already freed workqueue, leading to a double-destroy or UAF condition. This is a local vulnerability requiring low privileges to trigger via hardware configuration or error paths. Patches have been released for various stable branches including 6.18.y, 6.19.y, and 7.0-rc.
Affected products
- Linux Linux Kernel 6.18.16 to 6.18.19, 6.19.6 to 6.19.9, 7.0-rc2, 7.0-rc3
Timeline
- 2026-03-09: other: Patch authored
- 2026-05-08: disclosed: CVE published
- 2026-05-21: advisory: NVD enrichment and analysis completed