CVE-2026-98486

net: ena: fix MMIO read buffer leak on probe failure

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ena: fix MMIO read buffer leak on probe failure

ena_device_init() initializes the MMIO read mechanism with ena_com_mmio_reg_read_request_init(), which allocates a coherent DMA buffer for MMIO read responses.

The normal removal path releases this buffer through ena_com_mmio_reg_read_request_destroy(). However, if ena_probe() fails after ena_device_init() succeeds, the error path destroys the admin resources and eventually frees ena_dev without destroying the MMIO read request, leaving the coherent DMA buffer allocated.

Call ena_com_mmio_reg_read_request_destroy() in the probe error path before releasing the remaining device resources.

This issue was found by manual code inspection.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1738cd3ed342294360d6a74d4e58800004bff854 to before 9de940a3c5731be5a544f6f366576cc4dc073f7cAffected 1738cd3ed342294360d6a74d4e58800004bff854 to before 4b90112826439149dcee20e73d02f25ae0e2a9fbAffected 1738cd3ed342294360d6a74d4e58800004bff854 to before 0d31edc7ff1f7f265c11248819dfaf5a8274b209Affected 1738cd3ed342294360d6a74d4e58800004bff854 to before a0f5fd7a285f44fa402242f26feddfe1d4a0fc6cAffected 1738cd3ed342294360d6a74d4e58800004bff854 to before 7bd3e9a2d0c288e54f51df260d9433163f5fbc1eAffected 1738cd3ed342294360d6a74d4e58800004bff854 to before 30ff01b4c7e419bb70f40f01dcd7f6af680808b3Affected 1738cd3ed342294360d6a74d4e58800004bff854 to before 47785f9f638b064ce6e32e8e3b6f1ffd83849fc2Affected 1738cd3ed342294360d6a74d4e58800004bff854 to before 9476b4468862927297c94c440863cd8ed1e7cc83Affected
LinuxLinux	4.9Affected before 4.9Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.55 through 6.18.Not affected 7.2.9 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

1738cd3ed342294360d6a74d4e58800004bff854 to before 9de940a3c5731be5a544f6f366576cc4dc073f7cAffected
1738cd3ed342294360d6a74d4e58800004bff854 to before 4b90112826439149dcee20e73d02f25ae0e2a9fbAffected
1738cd3ed342294360d6a74d4e58800004bff854 to before 0d31edc7ff1f7f265c11248819dfaf5a8274b209Affected
1738cd3ed342294360d6a74d4e58800004bff854 to before a0f5fd7a285f44fa402242f26feddfe1d4a0fc6cAffected
1738cd3ed342294360d6a74d4e58800004bff854 to before 7bd3e9a2d0c288e54f51df260d9433163f5fbc1eAffected
1738cd3ed342294360d6a74d4e58800004bff854 to before 30ff01b4c7e419bb70f40f01dcd7f6af680808b3Affected
1738cd3ed342294360d6a74d4e58800004bff854 to before 47785f9f638b064ce6e32e8e3b6f1ffd83849fc2Affected
1738cd3ed342294360d6a74d4e58800004bff854 to before 9476b4468862927297c94c440863cd8ed1e7cc83Affected

LinuxLinux

4.9Affected
before 4.9Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.55 through 6.18.*Not affected
7.2.9 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.