CVE-2026-63972
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
20/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: mana: Skip redundant detach on already-detached port<br />
<br />
When mana_per_port_queue_reset_work_handler() runs after a previous<br />
detach succeeded but attach failed, the port is left in a detached<br />
state with apc->tx_qp and apc->rxqs already freed. Calling<br />
mana_detach() again unconditionally leads to NULL pointer dereferences<br />
during queue teardown.<br />
<br />
Add an early exit in mana_detach() when the port is already in<br />
detached state (!netif_device_present) for non-close callers, making<br />
it safe to call idempotently. This allows the queue reset handler and<br />
other recovery paths to simply retry mana_attach() without redundant<br />
teardown.
Impacto
Puntuación base 3.x
7.50
Gravedad 3.x
ALTA