CVE-2026-43056
- Source
- https://cve.org/CVERecord?id=CVE-2026-43056
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43056.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-43056
- Downstream
- Related
- Published
- 2026-05-01T14:15:48.837Z
- Modified
- 2026-07-08T08:02:14.741455532Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- net: mana: fix use-after-free in add_adev() error path
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: mana: fix use-after-free in add_adev() error path
If auxiliarydeviceadd() fails, addadev() jumps to addfail and calls auxiliarydeviceuninit(adev).
The auxiliary device has its release callback set to adevrelease(), which frees the containing struct manaadev. Since adev is embedded in struct manaadev, the subsequent fall-through to initfail and access to adev->id may result in a use-after-free.
Fix this by saving the allocated auxiliary device id in a local variable before calling auxiliarydeviceadd(), and use that saved id in the cleanup path after auxiliarydeviceuninit().
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43056.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/43f5b19fd190fea20d052bc84741b28031d5baa9
- https://git.kernel.org/stable/c/5f4061f8225d18695e5afe9bbf1cb7bd673d7872
- https://git.kernel.org/stable/c/c4ea7d8907cf72b259bf70bd8c2e791e1c4ff70f
- https://git.kernel.org/stable/c/d88541ffd56d62a61e77209080001eddd4d69815
- https://git.kernel.org/stable/c/e5a75bf026c686b91a7dc6f9c5caf5016745d1fe
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43056.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-43056
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda69839d4327d053b18d8e1b0e7ddeee78db78f4fFixedd88541ffd56d62a61e77209080001eddd4d69815Fixed43f5b19fd190fea20d052bc84741b28031d5baa9Fixed5f4061f8225d18695e5afe9bbf1cb7bd673d7872Fixede5a75bf026c686b91a7dc6f9c5caf5016745d1feFixedc4ea7d8907cf72b259bf70bd8c2e791e1c4ff70f