In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure ena_device_init()… (CVE-2026-98486)

The Linux kernel's ena driver initializes an MMIO read mechanism that allocates a coherent DMA buffer for MMIO read responses during ena_device_init(). Under normal operation, this buffer is released properly. However, if ena_probe() fails after successful initialization, the error path frees device resources without destroying the MMIO read request, causing the DMA buffer to leak. The fix involves calling ena_com_mmio_reg_read_request_destroy() in the probe error path before releasing device resources. This issue was identified through manual code inspection.

The vulnerability causes a memory/resource leak of a coherent DMA buffer during probe failure in the ena driver. This could lead to increased memory usage and potential resource exhaustion on affected systems. There is no indication of direct security compromise or exploitation in the wild.

A fix has been implemented to call ena_com_mmio_reg_read_request_destroy() in the probe error path to properly free the DMA buffer. Users should apply the updated Linux kernel version containing this fix once available. Patch status is not explicitly stated; check the vendor or Linux kernel advisories for the official patch and remediation guidance.