---
id: CVE-2026-43440
title: 'net/mana: Null service_wq on setup error to prevent double destroy'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net/mana: Null service_wq on setup error to prevent double destroy

  In mana_gd_setup() error path, set gc->service_wq to NULL after
  destroy_workqueue() to match the cle…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= fa3c2f8d9152344a478abb847081c1b5f84a94f5 <
    59489ce60d7412ed82fb1d8002faa3102dcd4916
  - >-
    Linux >= a9a7c3203fdc4d4a8d8a7a3b1ed05d2bb4c6e77e <
    6c92392602b451e3869f15ab685f8f650e942b13
  - >-
    Linux >= f975a0955276579e2176a134366ed586071c7c6a <
    87c2302813abc55c46485711a678e3c312b00666
  - Linux >= 6.18.16 < 6.18.19
  - Linux >= 6.19.6 < 6.19.9
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:38:48.023258Z'
published: '2026-05-08'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:42:54.226Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43440'
references:
  - url: 'https://git.kernel.org/stable/c/59489ce60d7412ed82fb1d8002faa3102dcd4916'
  - url: 'https://git.kernel.org/stable/c/6c92392602b451e3869f15ab685f8f650e942b13'
  - url: 'https://git.kernel.org/stable/c/87c2302813abc55c46485711a678e3c312b00666'
tags:
  - cve.org
epss: 0.00124
epssPercentile: 0.02125
ingestedAt: '2026-11-06T15:54:03.910Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net/mana: Null service_wq on setup error to prevent double destroy

In mana_gd_setup() error path, set gc->service_wq to NULL after
destroy_workqueue() to match the cleanup in mana_gd_cleanup().
This prevents a use-after-free if the workqueue pointer is checked
after a failed setup.

## Affected

- `Linux >= fa3c2f8d9152344a478abb847081c1b5f84a94f5 < 59489ce60d7412ed82fb1d8002faa3102dcd4916`
- `Linux >= a9a7c3203fdc4d4a8d8a7a3b1ed05d2bb4c6e77e < 6c92392602b451e3869f15ab685f8f650e942b13`
- `Linux >= f975a0955276579e2176a134366ed586071c7c6a < 87c2302813abc55c46485711a678e3c312b00666`
- `Linux >= 6.18.16 < 6.18.19`
- `Linux >= 6.19.6 < 6.19.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.