CVE-2024-42069

A flaw was found in the Linux kernel's Microsoft Azure Network Adapter (MANA) driver. A local user could exploit this vulnerability to cause a Denial of Service (DoS) or kernel memory corruption. This issue occurs because an improper error-handling path releases the same memory allocation twice when auxiliary device initialization fails.

This vulnerability is rated as Moderate severity because it requires local access on systems configured with Microsoft Azure Network Adapter (MANA) hardware or emulated devices, limiting the primary impact to a kernel denial of service rather than arbitrary code execution or confidentiality loss. The defect is confined to an error-handling path during auxiliary device initialization, which is uncommon during standard operational lifecycles. Red Hat Enterprise Linux environments operating on non-Azure platforms or without MANA hardware interfaces are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.