[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-43276":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":34,"related":35,"reserved_at":9,"published_at":36,"modified_at":37,"state":38,"summary":39,"references_raw":48,"kevs":63,"epss":64,"epss_history":67,"metrics":237,"affected":243},"CVE-2026-43276","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: Fix double destroy_workqueue on service rescan PCI path\n\nWhile testing corner cases in the driver, a use-after-free crash\nwas found on the service rescan PCI path.\n\nWhen mana_serv_reset() calls mana_gd_suspend(), mana_gd_cleanup()\ndestroys gc->service_wq. If the subsequent mana_gd_resume() fails\nwith -ETIMEDOUT or -EPROTO, the code falls through to\nmana_serv_rescan() which triggers pci_stop_and_remove_bus_device().\nThis invokes the PCI .remove callback (mana_gd_remove), which calls\nmana_gd_cleanup() a second time, attempting to destroy the already-\nfreed workqueue. Fix this by NULL-checking gc->service_wq in\nmana_gd_cleanup() and setting it to NULL after destruction.\n\nCall stack of issue for reference:\n[Sat Feb 21 18:53:48 2026] Call Trace:\n[Sat Feb 21 18:53:48 2026]  \u003CTASK>\n[Sat Feb 21 18:53:48 2026]  mana_gd_cleanup+0x33/0x70 [mana]\n[Sat Feb 21 18:53:48 2026]  mana_gd_remove+0x3a/0xc0 [mana]\n[Sat Feb 21 18:53:48 2026]  pci_device_remove+0x41/0xb0\n[Sat Feb 21 18:53:48 2026]  device_remove+0x46/0x70\n[Sat Feb 21 18:53:48 2026]  device_release_driver_internal+0x1e3/0x250\n[Sat Feb 21 18:53:48 2026]  device_release_driver+0x12/0x20\n[Sat Feb 21 18:53:48 2026]  pci_stop_bus_device+0x6a/0x90\n[Sat Feb 21 18:53:48 2026]  pci_stop_and_remove_bus_device+0x13/0x30\n[Sat Feb 21 18:53:48 2026]  mana_do_service+0x180/0x290 [mana]\n[Sat Feb 21 18:53:48 2026]  mana_serv_func+0x24/0x50 [mana]\n[Sat Feb 21 18:53:48 2026]  process_one_work+0x190/0x3d0\n[Sat Feb 21 18:53:48 2026]  worker_thread+0x16e/0x2e0\n[Sat Feb 21 18:53:48 2026]  kthread+0xf7/0x130\n[Sat Feb 21 18:53:48 2026]  ? __pfx_worker_thread+0x10/0x10\n[Sat Feb 21 18:53:48 2026]  ? __pfx_kthread+0x10/0x10\n[Sat Feb 21 18:53:48 2026]  ret_from_fork+0x269/0x350\n[Sat Feb 21 18:53:48 2026]  ? __pfx_kthread+0x10/0x10\n[Sat Feb 21 18:53:48 2026]  ret_from_fork_asm+0x1a/0x30\n[Sat Feb 21 18:53:48 2026]  \u003C/TASK>",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-415","Double Free","The product calls free() twice on the same memory address.","weakness","Draft","Variant","High",[],[],[],[],[24,26,28,30,32],{"_key":25},"USN-8310-1",{"_key":27},"DEBIAN-CVE-2026-43276",{"_key":29},"RHSA-2026:36018",{"_key":31},"RHSA-2026:36541",{"_key":33},"UBUNTU-CVE-2026-43276",[],[],"2026-05-06T11:28:58.840Z","2026-05-11T22:21:25.701Z","Analyzed",{"cisa_kev":40,"cisa_ransomware":40,"cisa_vendor":9,"epss_severity":41,"epss_score":42,"severity":43,"severity_score":44,"severity_version":45,"severity_source":46,"severity_vector":47,"severity_status":38},false,"low",0.00118,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[49,55,59],{"url":50,"sources":51,"tags":53},"https://git.kernel.org/stable/c/a9a7c3203fdc4d4a8d8a7a3b1ed05d2bb4c6e77e",[46,52],"cve.org",[54],"Patch",{"url":56,"sources":57,"tags":58},"https://git.kernel.org/stable/c/f975a0955276579e2176a134366ed586071c7c6a",[46,52],[54],{"url":60,"sources":61,"tags":62},"https://git.kernel.org/stable/c/fa3c2f8d9152344a478abb847081c1b5f84a94f5",[46,52],[54],[],{"date":65,"score":42,"percentile":66},"2026-07-05",0.01975,[68,72,75,79,82,85,89,92,95,98,101,104,107,110,113,116,119,122,125,128,131,134,137,140,143,146,149,152,155,158,161,163,167,170,173,176,179,182,185,188,191,193,196,199,202,205,207,210,212,214,216,218,220,222,225,228,230,232,234,236],{"date":69,"score":70,"percentile":71},"2026-05-07",0.00017,0.04088,{"date":73,"score":70,"percentile":74},"2026-05-08",0.04094,{"date":76,"score":77,"percentile":78},"2026-05-09",0.00012,0.0166,{"date":80,"score":77,"percentile":81},"2026-05-10",0.01661,{"date":83,"score":77,"percentile":84},"2026-05-11",0.01662,{"date":86,"score":87,"percentile":88},"2026-05-12",0.00013,0.02191,{"date":90,"score":87,"percentile":91},"2026-05-13",0.02203,{"date":93,"score":87,"percentile":94},"2026-05-14",0.02209,{"date":96,"score":87,"percentile":97},"2026-05-15",0.02213,{"date":99,"score":87,"percentile":100},"2026-05-16",0.02222,{"date":102,"score":87,"percentile":103},"2026-05-17",0.02218,{"date":105,"score":87,"percentile":106},"2026-05-18",0.02201,{"date":108,"score":87,"percentile":109},"2026-05-19",0.02188,{"date":111,"score":87,"percentile":112},"2026-05-20",0.02181,{"date":114,"score":87,"percentile":115},"2026-05-21",0.02168,{"date":117,"score":87,"percentile":118},"2026-05-22",0.0231,{"date":120,"score":87,"percentile":121},"2026-05-23",0.02304,{"date":123,"score":87,"percentile":124},"2026-05-24",0.02287,{"date":126,"score":87,"percentile":127},"2026-05-25",0.02274,{"date":129,"score":87,"percentile":130},"2026-05-26",0.02255,{"date":132,"score":87,"percentile":133},"2026-05-27",0.02275,{"date":135,"score":87,"percentile":136},"2026-05-28",0.02268,{"date":138,"score":87,"percentile":139},"2026-05-29",0.02276,{"date":141,"score":87,"percentile":142},"2026-05-30",0.02297,{"date":144,"score":87,"percentile":145},"2026-05-31",0.02289,{"date":147,"score":87,"percentile":148},"2026-06-01",0.02281,{"date":150,"score":87,"percentile":151},"2026-06-02",0.02266,{"date":153,"score":87,"percentile":154},"2026-06-03",0.0225,{"date":156,"score":87,"percentile":157},"2026-06-04",0.02254,{"date":159,"score":87,"percentile":160},"2026-06-05",0.0227,{"date":162,"score":87,"percentile":127},"2026-06-06",{"date":164,"score":165,"percentile":166},"2026-06-07",0.00015,0.03295,{"date":168,"score":165,"percentile":169},"2026-06-08",0.03277,{"date":171,"score":165,"percentile":172},"2026-06-09",0.03264,{"date":174,"score":165,"percentile":175},"2026-06-10",0.03263,{"date":177,"score":165,"percentile":178},"2026-06-11",0.03283,{"date":180,"score":165,"percentile":181},"2026-06-12",0.03297,{"date":183,"score":165,"percentile":184},"2026-06-13",0.03284,{"date":186,"score":165,"percentile":187},"2026-06-14",0.03298,{"date":189,"score":42,"percentile":190},"2026-06-15",0.01984,{"date":192,"score":42,"percentile":190},"2026-06-16",{"date":194,"score":42,"percentile":195},"2026-06-17",0.01988,{"date":197,"score":42,"percentile":198},"2026-06-18",0.01983,{"date":200,"score":42,"percentile":201},"2026-06-19",0.0198,{"date":203,"score":42,"percentile":204},"2026-06-20",0.01977,{"date":206,"score":42,"percentile":66},"2026-06-21",{"date":208,"score":42,"percentile":209},"2026-06-22",0.01972,{"date":211,"score":42,"percentile":209},"2026-06-23",{"date":213,"score":42,"percentile":209},"2026-06-24",{"date":215,"score":42,"percentile":66},"2026-06-25",{"date":217,"score":42,"percentile":201},"2026-06-26",{"date":219,"score":42,"percentile":201},"2026-06-27",{"date":221,"score":42,"percentile":204},"2026-06-28",{"date":223,"score":42,"percentile":224},"2026-06-29",0.01976,{"date":226,"score":42,"percentile":227},"2026-06-30",0.01978,{"date":229,"score":42,"percentile":224},"2026-07-01",{"date":231,"score":42,"percentile":224},"2026-07-02",{"date":233,"score":42,"percentile":66},"2026-07-03",{"date":235,"score":42,"percentile":224},"2026-07-04",{"date":65,"score":42,"percentile":66},[238],{"source":46,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":239,"cvss_v4_0":9},{"baseScore":44,"baseSeverity":240,"vectorString":47,"impactScore":241,"exploitabilityScore":242},"HIGH",9.8,4.6,[244,264],{"ecosystem":9,"name":245,"vendor":246,"product":246,"cpe_part":247,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":248},"Linux","linux","a",[249,256,259,262],{"version":250,"is_range":251,"range_type":52,"version_start":252,"version_start_type":253,"version_end":254,"version_end_type":255,"fixed_in":9},">= 505cc26bcae00699bacaee66cd50ede7a9cc89cb, \u003C fa3c2f8d9152344a478abb847081c1b5f84a94f5",true,"505cc26bcae00699bacaee66cd50ede7a9cc89cb","including","fa3c2f8d9152344a478abb847081c1b5f84a94f5","excluding",{"version":257,"is_range":251,"range_type":52,"version_start":252,"version_start_type":253,"version_end":258,"version_end_type":255,"fixed_in":9},">= 505cc26bcae00699bacaee66cd50ede7a9cc89cb, \u003C a9a7c3203fdc4d4a8d8a7a3b1ed05d2bb4c6e77e","a9a7c3203fdc4d4a8d8a7a3b1ed05d2bb4c6e77e",{"version":260,"is_range":251,"range_type":52,"version_start":252,"version_start_type":253,"version_end":261,"version_end_type":255,"fixed_in":9},">= 505cc26bcae00699bacaee66cd50ede7a9cc89cb, \u003C f975a0955276579e2176a134366ed586071c7c6a","f975a0955276579e2176a134366ed586071c7c6a",{"version":263,"is_range":40,"range_type":52,"version_start":263,"version_start_type":253,"version_end":263,"version_end_type":253,"fixed_in":9},"6.16",{"ecosystem":9,"name":265,"vendor":246,"product":266,"cpe_part":247,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":267},"Linux Kernel","linux kernel",[268,272,276],{"version":269,"is_range":251,"range_type":270,"version_start":263,"version_start_type":253,"version_end":271,"version_end_type":255,"fixed_in":9},"gte6.16_lt6.18.16","cpe","6.18.16",{"version":273,"is_range":251,"range_type":270,"version_start":274,"version_start_type":253,"version_end":275,"version_end_type":255,"fixed_in":9},"gte6.19_lt6.19.6","6.19","6.19.6",{"version":277,"is_range":40,"range_type":270,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1"]