CVE-2026-63972
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
20/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: mana: Skip redundant detach on already-detached port<br />
<br />
When mana_per_port_queue_reset_work_handler() runs after a previous<br />
detach succeeded but attach failed, the port is left in a detached<br />
state with apc->tx_qp and apc->rxqs already freed. Calling<br />
mana_detach() again unconditionally leads to NULL pointer dereferences<br />
during queue teardown.<br />
<br />
Add an early exit in mana_detach() when the port is already in<br />
detached state (!netif_device_present) for non-close callers, making<br />
it safe to call idempotently. This allows the queue reset handler and<br />
other recovery paths to simply retry mana_attach() without redundant<br />
teardown.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH