CVE-2026-72064

A flaw was found in the Linux kernel's mana network driver. When the driver allocates receive (RX) buffers from page pool fragments, it fails to perform an explicit synchronization for the CPU. This oversight can lead to data integrity issues or system instability on systems configured to require explicit Direct Memory Access (DMA) syncing.

This vulnerability is rated Moderate because exploitation requires the presence of Microsoft Azure Network Adapter (MANA) hardware or emulated devices alongside specific kernel configurations mandating explicit DMA synchronization. Typical enterprise deployments that do not operate within Microsoft Azure environments or do not configure MANA virtual NICs are unaffected by this flaw. Even on systems utilizing MANA interfaces, normal network operations are unaffected unless explicit DMA syncing mechanisms, such as forced software bounce buffering, are actively enforced.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.