CVE-2026-64018

A flaw was found in the Linux kernel's mana network driver. In Confidential Virtual Machines (VMs), a missing bounds check when processing network events can allow a malicious hardware component or a compromised VM to write data outside of an intended memory region. This out-of-bounds access could lead to system instability or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the 'mana' kernel module from loading if it is not required for your system's operation, especially in Confidential VM environments.

1. Create a file named /etc/modprobe.d/disable-mana.conf with the following content: blacklist mana

2. Rebuild the initramfs: dracut -f -v

3. Reboot the system for the changes to take effect.

Warning: This action may impact network functionality if the 'mana' driver is essential for the system's network operations. A system reboot is required for the changes to be applied.