CVE-2026-63973

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue exists in the net: mana component. When queue allocation fails during the attach process, the error cleanup routine frees and sets apc->tx qp and apc->rxqs to NULL. Subsequent calls to certain functions may attempt to dereference these pointers without proper NULL checks, leading to a system panic. The affected functions include mana chn setxdp(), which dereferences apc->rxqs[0], and mana destroy vport(), mana fence rqs(), and mana dealloc queues(), which iterate through apc->rxqs or apc->tx qp without validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.