The vulnerability is a use‑after‑free in Microsoft’s Linux kernel MANA network driver. An attacker who has local access can trigger the flaw and gain elevated privileges, enabling the execution of arbitrary code as root. The flaw is classified as CWE‑416: Use After Free.

Microsoft’s Linux kernel MANA network driver is affected. The advisory does not list specific affected versions, so any deployment of the driver may be vulnerable until an official patch is released.

The CVSS score of 8.2 indicates high severity. EPSS information is not available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a local authorized attacker who can interact with the driver; remote exploitation is not indicated. Exploitation would allow complete compromise of the host system by granting root privileges.