GHSA-25hr-298p-f2jgHighCVSS 7.8
In the Linux kernel, the following vulnerability has been resolved: net/mana: Null service_wq on...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
net/mana: Null service_wq on setup error to prevent double destroy
In mana_gd_setup() error path, set gc->service_wq to NULL after
destroy_workqueue() to match the cleanup in mana_gd_cleanup().
This prevents a use-after-free if the workqueue pointer is checked
after a failed setup.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-43440
- https://git.kernel.org/stable/c/59489ce60d7412ed82fb1d8002faa3102dcd4916
- https://git.kernel.org/stable/c/6c92392602b451e3869f15ab685f8f650e942b13
- https://git.kernel.org/stable/c/87c2302813abc55c46485711a678e3c312b00666
- https://github.com/advisories/GHSA-25hr-298p-f2jg