CVE-2026-98559net/smc: fix UAF on lgr list traversal in smcr_port_err()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port_err() smcr_port_err() traverses smc_lgr_list.list without holding smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced. Hold smc_lgr_list.lock across the traversal. Update smc_ib_gid_check() to call smcr_port_err() after releasing the lock.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | 541afa10c126b6c22c2a805a559c70cc41fd156e builds before 34bcf11cd2528ae00bb6d764d808083c66824277; 541afa10c126b6c22c2a805a559c70cc41fd156e builds before 0edcc4284392b28826b5d37532b366b291e6e0fa; 541afa10c126b6c22c2a805a559c70cc41fd156e builds before 00a59600ae72d24859d0ad1783a78bc921bc2599; 541afa10c126b6c22c2a805a559c70cc41fd156e builds before 3d35f069e1c119992000d51236dbe54da2d4e61e; 541afa10c126b6c22c2a805a559c70cc41fd156e builds before 3d65a2eb4449fc9658fb860dea893025d028d90e; from 541afa10c126b6c22c2a805a559c70cc41fd156e before a9b968e42690d784c241a0761c10253271f7df5d; 541afa10c126b6c22c2a805a559c70cc41fd156e builds before 61cb282fe97b3b0ba32ca09417a693162bf4ae3f | CNA record |
References
- https://git.kernel.org/stable/c/34bcf11cd2528ae00bb6d764d808083c66824277
- https://git.kernel.org/stable/c/0edcc4284392b28826b5d37532b366b291e6e0fa
- https://git.kernel.org/stable/c/00a59600ae72d24859d0ad1783a78bc921bc2599
- https://git.kernel.org/stable/c/3d35f069e1c119992000d51236dbe54da2d4e61e
- https://git.kernel.org/stable/c/3d65a2eb4449fc9658fb860dea893025d028d90e
- https://git.kernel.org/stable/c/a9b968e42690d784c241a0761c10253271f7df5d
- https://git.kernel.org/stable/c/61cb282fe97b3b0ba32ca09417a693162bf4ae3f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.