UBUNTU-CVE-2026-98486: Low severity ubuntu/linux vulnerability
In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure enadeviceinit() initializes the MMIO read mechanism with enacommmioregreadrequestinit(), which allocates a coherent DMA buffer for MMIO read responses. The normal removal path releases this buffer through enacommmioregreadrequestdestroy(). However, if enaprobe() fails after enadeviceinit() succeeds, the error path destroys the admin resources and eventually frees enadev without destroying the MMIO read request, leaving the coherent DMA buffer allocated. Call enacommmioregreadrequestdestroy() in the probe error path before releasing the remaining device resources. This issue was found by manual code inspection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Call ena_com_mmio_reg_read_request_destroy() in the ena_probe() error path before releasing the remaining device resources, when ena_device_init() has succeeded.
Linux kernel net: ena probe error-path cleanup = call ena_com_mmio_reg_read_request_destroy()