CVE-2026-43056

A flaw was found in the Linux kernel's mana network driver. An issue in the error handling of the add_adev() function can lead to a use-after-free vulnerability. This occurs when memory is released prematurely but then accessed again, which could allow a local attacker to cause a system crash (denial of service) or potentially gain elevated access (privilege escalation).

This vulnerability is rated as Moderate because exploitation requires local system access and is restricted to environments utilizing Microsoft Azure Network Adapter (MANA) hardware. The defect occurs within the driver initialization failure path, which is uncommon during standard runtime operations. Systems deployed on bare metal or on alternative virtualization platforms without MANA interfaces are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.