CVE-2026-63973

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Add NULL guards in teardown path to prevent panic on attach failure

When queue allocation fails partway through, the error cleanup frees and NULLs apc->txqp and apc->rxqs. Multiple teardown paths such as manaremove(), manachangemtu() recovery, and internal error handling in manaallocqueues() can subsequently call into functions that dereference these pointers without NULL checks:

• manachnsetxdp() dereferences apc->rxqs[0], causing a NULL pointer dereference panic (CR2: 0000000000000000 at manachnsetxdp+0x26).
• manadestroyvport() iterates apc->rxqs without a NULL check.
• manafencerqs() iterates apc->rxqs without a NULL check.
• manadeallocqueues() iterates apc->tx_qp without a NULL check.

Add NULL guards for apc->rxqs in manafencerqs(), manadestroyvport(), and before the manachnsetxdp() call. Add a NULL guard for apc->txqp in manadealloc_queues() to skip TX queue draining when TX queues were never allocated or already freed.