The Linux kernel vulnerability CVE-2026-63972 involves the mana network driver where mana_detach() is called redundantly on a port that is already detached. This occurs when mana_per_port_queue_reset_work_handler() runs after a successful detach but a failed attach, leaving the port in a detached state with freed resources. Subsequent unconditional calls to mana_detach() lead to NULL pointer dereferences during queue teardown. The fix adds an early exit in mana_detach() for ports already detached, allowing safe repeated calls and enabling recovery paths to retry mana_attach() without redundant teardown.

The vulnerability can cause NULL pointer dereferences in the Linux kernel's mana network driver, potentially leading to kernel crashes or denial of service conditions. There is no indication of remote code execution or privilege escalation. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to add an early exit in mana_detach() when the port is already detached, preventing redundant detach calls and NULL pointer dereferences. Users should apply the official kernel updates that include this patch. Patch status is not explicitly confirmed in the provided data; check the Linux kernel vendor advisory for the exact fixed versions and update accordingly.