In the Linux kernel, the following vulnerability has been resolved:
net: mana: Skip redundant detach on already-detached port
When mana_per_port_queue_reset_work_handler() runs after a previous
detach succeeded but attach failed, the port is left in a detached
state with apc->tx_qp and apc->rxqs already freed. Calling
mana_detach() again unconditionally leads to NULL pointer dereferences
during queue teardown.
Add an early exit in mana_detach() when the port is already in
detached state (!netif_device_present) for non-close callers, making
it safe to call idempotently. This allows the queue reset handler and
other recovery paths to simply retry mana_attach() without redundant
teardown.
References
Configurations
Configuration 1 (hide)
|
History
02 Oct 2026, 19:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* |
|
| First Time |
Linux
Linux linux Kernel |
|
| CWE | CWE-476 | |
| References | () https://git.kernel.org/stable/c/5b05aa36ee24297d7296ca58dfd8c448d0e4cda3 - Patch | |
| References | () https://git.kernel.org/stable/c/7ae590797f9b5c240aaea5773f5f00977a42a846 - Patch | |
| References | () https://git.kernel.org/stable/c/c4152b4e28b3e550ec99351bf900e2c24c2608cc - Patch |
Information
Published : 2026-07-19 16:17
Updated : 2026-10-02 19:41
NVD link : CVE-2026-63972
Mitre link : CVE-2026-63972
CVE.ORG link : CVE-2026-63972
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference