In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on attach failure… (CVE-2026-63973)

The Linux kernel's net: mana module had a vulnerability where, if queue allocation failed partway, error cleanup would free and NULL certain pointers (apc->tx_qp and apc->rxqs). However, subsequent teardown functions such as mana_remove(), mana_change_mtu() recovery, and internal error handling in mana_alloc_queues() could call functions that dereference these pointers without checking for NULL, leading to kernel panics. Specifically, functions mana_chn_setxdp(), mana_destroy_vport(), mana_fence_rqs(), and mana_dealloc_queues() lacked NULL checks on these pointers. The fix involved adding NULL guards in these functions to prevent dereferencing NULL pointers and avoid kernel panics.

The vulnerability can cause a denial of service via kernel panic (NULL pointer dereference) when queue allocation fails and error cleanup proceeds without proper NULL checks. There is no impact on confidentiality or integrity, only availability due to potential system crashes.

A fix has been implemented that adds NULL pointer checks in the affected functions to prevent kernel panics. Users should apply the official Linux kernel patches that include these NULL guards. Since no patch links are provided here, check the Linux kernel vendor advisories or mainline kernel updates for the fix. No additional mitigation is required beyond applying the patch.