Answer in brief
CVE-2026-63972 records a Unknown severity vulnerability in net: mana: Skip redundant detach on already-detached port. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=fb9f98e1041a30dd5766620a2a64cb472b54caa9 <c4152b4e28b3e550ec99351bf900e2c24c2608cc || >=3b194343c25084a8d2fa0c0f2c9e80f3080fd732 <7ae590797f9b5c240aaea5773f5f00977a42a846 || >=3b194343c25084a8d2fa0c0f2c9e80f3080fd732 <5b05aa36ee24297d7296ca58dfd8c448d0e4cda3 || >=6.18.33 <6.18.35 | c4152b4e28b3e550ec99351bf900e2c24c2608cc, 7ae590797f9b5c240aaea5773f5f00977a42a846, 5b05aa36ee24297d7296ca58dfd8c448d0e4cda3, 6.18.35 |
| Linux/Linuxgeneric | 7.0 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana_per_port_queue_reset_work_handler() runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc->tx_qp and apc->rxqs already freed. Calling mana_detach() again unconditionally leads to NULL pointer dereferences during queue teardown. Add an early exit in mana_detach() when the port is already in detached state (!netif_device_present) for non-close callers, making it safe to call idempotently. This allows the queue reset handler and other recovery paths to simply retry mana_attach() without redundant teardown.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-63972 records a Unknown severity vulnerability in net: mana: Skip redundant detach on already-detached port. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=fb9f98e1041a30dd5766620a2a64cb472b54caa9 <c4152b4e28b3e550ec99351bf900e2c24c2608cc || >=3b194343c25084a8d2fa0c0f2c9e80f3080fd732 <7ae590797f9b5c240aaea5773f5f00977a42a846 || >=3b194343c25084a8d2fa0c0f2c9e80f3080fd732 <5b05aa36ee24297d7296ca58dfd8c448d0e4cda3 || >=6.18.33 <6.18.35 | c4152b4e28b3e550ec99351bf900e2c24c2608cc, 7ae590797f9b5c240aaea5773f5f00977a42a846, 5b05aa36ee24297d7296ca58dfd8c448d0e4cda3, 6.18.35 |
| Linux/Linuxgeneric | 7.0 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana_per_port_queue_reset_work_handler() runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc->tx_qp and apc->rxqs already freed. Calling mana_detach() again unconditionally leads to NULL pointer dereferences during queue teardown. Add an early exit in mana_detach() when the port is already in detached state (!netif_device_present) for non-close callers, making it safe to call idempotently. This allows the queue reset handler and other recovery paths to simply retry mana_attach() without redundant teardown.
Quoted source text, attributed separately from HOL analysis.