In the Linux kernel, the following vulnerability has been resolved:
net: mana: fix use-after-free in add_adev() error path
If auxiliary_device_add() fails, add_adev() jumps to add_fail and calls auxiliary_device_uninit(adev).
The auxiliary device has its release callback set to adev_release(), which frees the containing struct mana_adev. Since adev is embedded in struct mana_adev, the subsequent fall-through to init_fail and access to adev->id may result in a use-after-free.
Fix this by saving the allocated auxiliary device id in a local variable before calling auxiliary_device_add(), and use that saved id in the cleanup path after auxiliary_device_uninit().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade rtlaUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-develUpgrade kernel-64k-develUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-64kUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-64kUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-rt-debug-devel | Jun 16, 2026 | Jun 11, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 17, 2026 | May 1, 2026 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade rvUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-modules-extra-matchedUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel | Jun 17, 2026 | Jun 13, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-laptop-23.10Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-generic-6.8Upgrade linux-image-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | May 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub