CVE-2026-97955

A flaw was found in the Microsoft Azure Network Adapter (MANA) driver in the Linux kernel. A local user with network administrative privileges can cause a denial of service (DoS) or potentially execute arbitrary code due to a use-after-free vulnerability. When attaching an eXpress Data Path (XDP) program fails during receive buffer allocation, the driver fails to restore the prior program pointer, leaving a dangling reference to memory that has been freed. Subsequent network interface operations access this invalid memory, resulting in memory corruption and a system crash.

A use-after-free in the Microsoft MANA XDP configuration path can occur when mana_xdp_set publishes a new bpf_prog pointer before RX buffer pre-allocation completes. If pre-allocation fails the XDP attach is reported as failed and the BPF core can free the program while apc->bpf_prog still references it. A later interface bring up or TX timeout reset can consume the stale pointer and call bpf_prog_add() on freed memory. This can at least cause a local denial of service and may permit confidentiality integrity or privilege impact if freed memory is reclaimed in a controllable way. For the CVSS the PR:L paranoid score assumes a local user or service account with delegated ability to configure an interface and attach an XDP program. In standard host deployments attaching XDP to a physical interface normally requires CAP_NET_ADMIN. The issue is not directly network reachable. Triggering also requires an RX buffer allocation failure followed by a later queue reconfiguration or reset. Impact is at least a local denial of service via use-after-free and in the worst case may allow broader impact due to memory corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.