CVE-2026-63972
highpriority · track · 0EPSS 0.006 · 48 %ileDEEUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana_per_port_queue_reset_work_handler() runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc->tx_qp and apc->rxqs already freed. Calling mana_detach() again unconditionally leads to NULL pointer dereferences during queue teardown. Add an early exit in mana_detach() when the port is already in detached state (!netif_device_present) for non-close callers, making it safe to call idempotently. This allows the queue reset handler and other recovery paths to simply retry mana_attach() without redundant teardown.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (28)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-2403Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffDeutsch2026-07-19csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen oder vertrauliche Informationen offenzulegen.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/5b05aa36ee24297d7296ca58dfd8c448d0e4cda3cnnvd
- https://git.kernel.org/stable/c/7ae590797f9b5c240aaea5773f5f00977a42a846cnnvd
- https://git.kernel.org/stable/c/c4152b4e28b3e550ec99351bf900e2c24c2608cccnnvd
- https://www.kernel.org/Patchcnnvd
- https://git.kernel.org/stable/c/5b05aa36ee24297d7296ca58dfd8c448d0e4cda3enisa_euvd
- https://git.kernel.org/stable/c/7ae590797f9b5c240aaea5773f5f00977a42a846enisa_euvd
- https://git.kernel.org/stable/c/c4152b4e28b3e550ec99351bf900e2c24c2608ccenisa_euvd
- https://git.kernel.org/stable/c/5b05aa36ee24297d7296ca58dfd8c448d0e4cda3nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan