305 matches found
CVE-2026-23454
In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in manahwcdestroychannel by reordering teardown A potential race condition exists in manahwcdestroychannel where hwc-callerctx is freed before the HWC's Completion Queue CQ and Event Queue EQ are...
UBUNTU-CVE-2026-23454
In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in manahwcdestroychannel by reordering teardown A potential race condition exists in manahwcdestroychannel where hwc-callerctx is freed before the HWC's Completion Queue CQ and Event Queue EQ are...
CVE-2026-23454
In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in manahwcdestroychannel by reordering teardown A potential race condition exists in manahwcdestroychannel where hwc-callerctx is freed before the HWC's Completion Queue CQ and Event Queue EQ are...
CVE-2026-23454 net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in manahwcdestroychannel by reordering teardown A potential race condition exists in manahwcdestroychannel where hwc-callerctx is freed before the HWC's Completion Queue CQ and Event Queue EQ are...
CVE-2026-23454
CVE-2026-23454 (Linux kernel, mana subsystem) : A race in mana_hwc_destroy_channel() can free hwc->caller_ctx before CQ/EQ are destroyed, enabling a use-after-free/NULL dereference in mana_hwc_handle_resp(). The root cause is lack of IRQ synchronization and a teardown order that frees resource...
PT-2026-30149
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in mana hwc destroy channel where hwc-caller ctx is freed before the Hardware Completion Queue CQ and Event Queue EQ are destroyed. This can lead to a...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the mana.hwc.destroychannel function’s ability to re-use memory after release, potentially leadin...
PT-2026-36473
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the net: mana component. When the auxiliary device add function fails, the add adev function triggers a cleanup path that calls auxiliary device...
Azure Linux 3.0 Security Update: kernel (CVE-2024-45001)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45001 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf allocsize alignmen...
EUVD-2025-143021
Malicious code in buis-suninna-mana npm...
EUVD-2025-144560
Malicious code in augis-pomdoi9r-mana npm...
EUVD-2025-144671
Malicious code in aps-leadang-mana npm...
EUVD-2025-144530
Malicious code in augis-pomdoui9r-mana npm...
Malicious code in aps-leadang-mana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3851faa63e7f37d30b5b02608f69f26b06834e45559144e1f10ca0a6b1283d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-144667
Malicious code in aps-leod-mana npm...
EUVD-2025-147842
Malicious code in tehah-mana-konatol npm...
EUVD-2025-147843
Malicious code in tehah-mana-buta npm...
Malicious code in mans-mana-nuts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d262218f4b60d8f1cc3fabcc1ebaaf74069f9324d1edd56616f4cf58aab03958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-9367
Malicious code in bioql PyPI...
net: mana: Fix TX CQE error handling
...