The Linux kernel’s mana driver contains a null‑pointer dereference that occurs when the driver attempts to detach a network port that has already been detached. The freed queue pointers are accessed again during teardown, which can trigger a kernel crash. This flaw results in a denial of service by bringing the entire system down. The weakness is classed as CWE‑476.

Linux kernels that include the mana networking driver are vulnerable when a port undergoes a detach after a failed attach, leading to a double detach scenario.

The CVSS score of 7.5 labels the vulnerability as high severity. The EPSS score is below 1 %, indicating a low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly documented, but the description implies that an attacker would need to succeed in triggering an attach‑detach sequence at kernel level, which normally requires local or privilege‑escalation access rather than remote exploitation.