CVE-2026-63972

net: mana: Skip redundant detach on already-detached port

State
Published
Severity
7.5 High
Published
Jul 19, 2026
Updated
Aug 5, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Skip redundant detach on already-detached port

When mana_per_port_queue_reset_work_handler() runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc->tx_qp and apc->rxqs already freed. Calling mana_detach() again unconditionally leads to NULL pointer dereferences during queue teardown.

Add an early exit in mana_detach() when the port is already in detached state (!netif_device_present) for non-close callers, making it safe to call idempotently. This allows the queue reset handler and other recovery paths to simply retry mana_attach() without redundant teardown.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fb9f98e1041a30dd5766620a2a64cb472b54caa9 to before c4152b4e28b3e550ec99351bf900e2c24c2608ccAffected
  • 3b194343c25084a8d2fa0c0f2c9e80f3080fd732 to before 7ae590797f9b5c240aaea5773f5f00977a42a846Affected
  • 3b194343c25084a8d2fa0c0f2c9e80f3080fd732 to before 5b05aa36ee24297d7296ca58dfd8c448d0e4cda3Affected
  • 6.18.33 to before 6.18.35Affected
LinuxLinux
  • 7.0Affected
  • before 7.0Not affected
  • 6.18.35 through 6.18.*Not affected
  • 7.0.12 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.