CVE-2026-43056

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the net: mana component. When the auxiliary device add() function fails, the add adev() function triggers a cleanup path that calls auxiliary device uninit(adev). Because the auxiliary device uses adev release() as its release callback, the struct mana adev is freed. A subsequent access to the id variable within the adev structure during the init fail process leads to a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.