Commit 9476b4468862 for kernel

commit 9476b4468862927297c94c440863cd8ed1e7cc83
Author: Guangshuo Li <lgs201920130244@gmail.com>
Date:   Mon Sep 21 23:42:02 2026 +0800

    net: ena: fix MMIO read buffer leak on probe failure

    ena_device_init() initializes the MMIO read mechanism with
    ena_com_mmio_reg_read_request_init(), which allocates a coherent DMA
    buffer for MMIO read responses.

    The normal removal path releases this buffer through
    ena_com_mmio_reg_read_request_destroy(). However, if ena_probe() fails
    after ena_device_init() succeeds, the error path destroys the admin
    resources and eventually frees ena_dev without destroying the MMIO read
    request, leaving the coherent DMA buffer allocated.

    Call ena_com_mmio_reg_read_request_destroy() in the probe error path
    before releasing the remaining device resources.

    This issue was found by manual code inspection.

    Fixes: 1738cd3ed342 ("net: ena: Add a driver for Amazon Elastic Network Adapters (ENA)")
    Cc: stable@vger.kernel.org
    Signed-off-by: Guangshuo Li <lgs201920130244@gmail.com>
    Link: https://patch.msgid.link/20260921154202.471662-3-lgs201920130244@gmail.com
    Signed-off-by: Jakub Kicinski <kuba@kernel.org>

diff --git a/drivers/net/ethernet/amazon/ena/ena_netdev.c b/drivers/net/ethernet/amazon/ena/ena_netdev.c
index 5f0864d16dd3..7eb6456ed0d5 100644
--- a/drivers/net/ethernet/amazon/ena/ena_netdev.c
+++ b/drivers/net/ethernet/amazon/ena/ena_netdev.c
@@ -4123,6 +4123,7 @@ static int ena_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
 	ena_com_delete_host_info(ena_dev);
 	ena_com_admin_destroy(ena_dev);
 	ena_phc_destroy(adapter);
+	ena_com_mmio_reg_read_request_destroy(ena_dev);
 ena_devlink_destroy:
 	ena_devlink_free(devlink);
 err_metrics_destroy: