PT-2026-61289 · Linux · Linux

CVE-2026-63972

·

Publicado

2026-07-19

·

Atualizado

2026-07-19

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Skip redundant detach on already-detached port
When mana per port queue reset work handler() runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc->tx qp and apc->rxqs already freed. Calling mana detach() again unconditionally leads to NULL pointer dereferences during queue teardown.
Add an early exit in mana detach() when the port is already in detached state (!netif device present) for non-close callers, making it safe to call idempotently. This allows the queue reset handler and other recovery paths to simply retry mana attach() without redundant teardown.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-63972

Produtos afetados

Linux