CVE-2026-43056: net: mana: fix use-after-free in add_adev() error path
In the Linux kernel, the following vulnerability has been resolved:
net: mana: fix use-after-free in addadev() error path
If auxiliarydeviceadd() fails, addadev() jumps to addfail and calls auxiliarydeviceuninit(adev).
The auxiliary device has its release callback set to adevrelease(), which frees the containing struct manaadev. Since adev is embedded in struct manaadev, the subsequent fall-through to initfail and access to adev->id may result in a use-after-free.
Fix this by saving the allocated auxiliary device id in a local variable before calling auxiliarydeviceadd(), and use that saved id in the cleanup path after auxiliarydeviceuninit().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43056?
CVE-2026-43056 has been classified with a significant severity due to the potential for a use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2026-43056?
To fix CVE-2026-43056, you should update your Linux kernel to the latest version that includes the patch for this vulnerability.
Which systems are affected by CVE-2026-43056?
CVE-2026-43056 affects various versions of the Linux kernel that utilize the mana driver.
What types of exploits are possible with CVE-2026-43056?
Exploiting CVE-2026-43056 could lead to system crashes or remote code execution due to the use-after-free condition.
Is CVE-2026-43056 actively being exploited?
As of now, there are no public reports indicating that CVE-2026-43056 is actively being exploited in the wild.