CVE-2026-63973

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: mana: Add NULL guards in teardown path to prevent panic on attach failure<br /> <br /> When queue allocation fails partway through, the error cleanup frees<br /> and NULLs apc-&gt;tx_qp and apc-&gt;rxqs. Multiple teardown paths such as<br /> mana_remove(), mana_change_mtu() recovery, and internal error handling<br /> in mana_alloc_queues() can subsequently call into functions that<br /> dereference these pointers without NULL checks:<br /> <br /> - mana_chn_setxdp() dereferences apc-&gt;rxqs[0], causing a NULL pointer<br /> dereference panic (CR2: 0000000000000000 at mana_chn_setxdp+0x26).<br /> - mana_destroy_vport() iterates apc-&gt;rxqs without a NULL check.<br /> - mana_fence_rqs() iterates apc-&gt;rxqs without a NULL check.<br /> - mana_dealloc_queues() iterates apc-&gt;tx_qp without a NULL check.<br /> <br /> Add NULL guards for apc-&gt;rxqs in mana_fence_rqs(),<br /> mana_destroy_vport(), and before the mana_chn_setxdp() call. Add a<br /> NULL guard for apc-&gt;tx_qp in mana_dealloc_queues() to skip TX queue<br /> draining when TX queues were never allocated or already freed.