Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63973

In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on attach failure When queue allocation fails partway through, the error cleanup frees and NULLs apc->tx_qp and apc->rxqs. Multiple teardown paths such as mana_remove(), mana_change_mtu() recovery, and internal error handling in mana_alloc_queues() can subsequently call into functions that dereference these pointers without NULL checks: - mana_chn_setxdp() dereferen
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:530fe5a4774401512b95eb498f7318421ef992a0771d55bfa2331501e2bac3cc
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/microsoft/mana/mana_en.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.93","versionType…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/microsoft/mana/mana_en.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"da7e4a1aaf397af6a094f640c92d6bc7564c10db","status":"affected","version":"ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f","versionType":"git"},{"lessThan":"95e414f8324385771bdfd6d497a01d5593813ccb","status":"affected","version":"ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f","versionType":"git"},{"lessThan":"26a96fa81496afe7d162d172ccdc8cb9dbc685d2","status":"affected","version":"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/microsoft/mana/mana_en.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.93","versionType…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/microsoft/mana/mana_en.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"da7e4a1aaf397af6a094f640c92d6bc7564c10db","status":"affected","version":"ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f","versionType":"git"},{"lessThan":"95e414f8324385771bdfd6d497a01d5593813ccb","status":"affected","version":"ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f","versionType":"git"},{"lessThan":"26a96fa81496afe7d162d172ccdc8cb9dbc685d2","status":"affected","version":"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/affected/0

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/0a9c520fdcb1cb2e79c163c12d359b5e1ee40007"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/17bfe0a8c014ee1d542ad352cd6a0a505361664a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/26a96fa81496afe7d162d172ccdc8cb9dbc685d2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/95e414f8324385771bdfd6d497a01d5593813ccb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/da7e4a1aaf397af6a094f640c92d6bc7564c10db"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/da87896f34e0a51489811d1a684e2953099ca98f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d4a01cd2c94c01be1aef06aa0ebe3532dd7dda18f4bd21fcbae728de35190622 · sha256:30ef736c5896a0f6… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer