CVE-2026-63972

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the net: mana driver when mana per port queue reset work handler() executes after a successful detach but a failed attach. In this scenario, the port remains detached while apc->tx qp and apc->rxqs are already freed. Subsequent unconditional calls to the mana detach() function during queue teardown trigger the crash. The issue is resolved by implementing an early exit in mana detach() when the port is already in a detached state (indicated by !netif device present) for non-close callers, ensuring the function is idempotent.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.