Linux Distros Unpatched Vulnerability : CVE-2026-64018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: validate rxreqidx to prevent out-of-bounds array access In manahwcrxeventhandler, rxreqidx is derived from sge-address in DMA-coherent memory. In...

CVE-2026-43056

In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in addadev error path If auxiliarydeviceadd fails, addadev jumps to addfail and calls auxiliarydeviceuninitadev. The auxiliary device has its release callback set to adevrelease, which frees the...

net: mana: Fix TX CQE error handling

...

CVE-2024-42069

CVE-2024-42069 affects the Linux kernel, in the mana network driver. The issue is a double-free in the error path of auxiliary_device_add() when it returns an error and subsequently calls auxiliary_device_uninit(); the callback adev_release frees madev via kfree and the code would free it again. ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a skb panic problem in the net/mana module...