CVE-2024-46784 net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Vulnerabilities in Mana Network Driver Two vulnerabilities in the Mana network driver have been addressed by Microsoft. CVE-2024-46784, published on September 18, 2024, involves error handling in NAPI cleanup, while CVE-2024-45001, published on September 4, 2024, pertains to RX buffer allocation size alignment and atomic operation panic. Both issues could affect systems utilizing the Mana driver. 2 sources 41