CVE-2026-43440

net/mana: Null service_wq on setup error to prevent double destroy

published May 8, 2026

CVSS
—
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/mana: Null service_wq on setup error to prevent double destroy

In mana_gd_setup() error path, set gc->service_wq to NULL after

destroy_workqueue() to match the cleanup in mana_gd_cleanup().

This prevents a use-after-free if the workqueue pointer is checked

after a failed setup.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.9th percentile
Published
2026-05-08T14:22Z
EPSS history
Timeline
  • 08 MAY 14:22Z
    net/mana: Null service_wq on setup error to prevent double destroy
    cvelistv5