PT-2026-61289 · Linux · Linux

CVE-2026-63972 · Published 2026-07-19 · Updated 2026-07-19

Mitre

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Skip redundant detach on already-detached port

When mana per port queue reset work handler() runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc->tx qp and apc->rxqs already freed. Calling mana detach() again unconditionally leads to NULL pointer dereferences during queue teardown.

Add an early exit in mana detach() when the port is already in detached state (!netif device present) for non-close callers, making it safe to call idempotently. This allows the queue reset handler and other recovery paths to simply retry mana attach() without redundant teardown.

Fix

Related Identifiers

CVE-2026-63972

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-63972 · Security Note
• https://git.kernel.org/stable/c/5b05aa36ee24297d7296ca58dfd8c448d0e4cda3 · Note
• https://git.kernel.org/stable/c/7ae590797f9b5c240aaea5773f5f00977a42a846 · Note
• https://git.kernel.org/stable/c/c4152b4e28b3e550ec99351bf900e2c24c2608cc · Note