Riskcovery

CVE-2026-43440

net/mana: Null service_wq on setup error to prevent double destroy

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mana: Null service_wq on setup error to prevent double destroy

In mana_gd_setup() error path, set gc->service_wq to NULL after destroy_workqueue() to match the cleanup in mana_gd_cleanup(). This prevents a use-after-free if the workqueue pointer is checked after a failed setup.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fa3c2f8d9152344a478abb847081c1b5f84a94f5 to before 59489ce60d7412ed82fb1d8002faa3102dcd4916Affected
  • a9a7c3203fdc4d4a8d8a7a3b1ed05d2bb4c6e77e to before 6c92392602b451e3869f15ab685f8f650e942b13Affected
  • f975a0955276579e2176a134366ed586071c7c6a to before 87c2302813abc55c46485711a678e3c312b00666Affected
LinuxLinux
  • 6.18.16 to before 6.18.19Affected
  • 6.19.6 to before 6.19.9Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.