CVE-2026-98486: net: ena: fix MMIO read buffer leak on probe failure
In the Linux kernel, the following vulnerability has been resolved:
net: ena: fix MMIO read buffer leak on probe failure
enadeviceinit() initializes the MMIO read mechanism with enacommmioregreadrequestinit(), which allocates a coherent DMA buffer for MMIO read responses.
The normal removal path releases this buffer through enacommmioregreadrequestdestroy(). However, if enaprobe() fails after enadeviceinit() succeeds, the error path destroys the admin resources and eventually frees enadev without destroying the MMIO read request, leaving the coherent DMA buffer allocated.
Call enacommmioregreadrequestdestroy() in the probe error path before releasing the remaining device resources.
This issue was found by manual code inspection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Call ena_com_mmio_reg_read_request_destroy() in the ena_probe() error path after ena_device_init() succeeds, before releasing the remaining device resources, to free the coherent DMA buffer allocated by ena_com_mmio_reg_read_request_init().