APPLIED [Q]: [SRU][R/Q:linux-azure][PATCH 0/4] [Mana][Backport] net: mana: Fix use-after-free in reset service rescan path & net: mana: Fix double destroy_workqueue on service rescan PCI path

John Cabaj john.cabaj at canonical.com
Mon Apr 6 17:22:28 UTC 2026


On 3/27/26 4:37 PM, John Cabaj wrote:
> BugLink: https://bugs.launchpad.net/bugs/2146588
> 
> SRU Justification
> 
> [Impact]
> 
> * Microsoft requested patches to address use-after-free and double-free issues in MANA driver
> 
> [Fix]
> Resolute
> * clean cherry-pick of upstream patches:
>    * fa103fc8f569: "net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown"
> Questing
> * clean cherry-pick of upstream patches:
>    * 3387a7ad478b: "net: mana: Fix use-after-free in reset service rescan path"
>    * f975a0955276: "net: mana: Fix double destroy_workqueue on service rescan PCI path"
>    * 87c2302813ab: "net/mana: Null service_wq on setup error to prevent double destroy"
>    * fa103fc8f569: "net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown"
> 
> [Test Plan]
> 
> * Compile tested
> * Microsoft to test
> 
> [Regression potential]
> 
> * Patches limited to MANA. Possible regressions result in unexpected behavior of MANA driver.
> 
> [Other info]
> 
> * SF#00431703
> 
> Dipayaan Roy (1):
>    net: mana: fix use-after-free in mana_hwc_destroy_channel() by
>      reordering teardown
> 
>   drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +++---
>   1 file changed, 3 insertions(+), 3 deletions(-)
> 

Applied to Questing linux-azure master-next branch.


Thanks,
j-c




More information about the kernel-team mailing list