-

CVE-2026-98559

net/smc: fix UAF on lgr list traversal in smcr_port_err()

In the Linux kernel, the following vulnerability has been resolved:

net/smc: fix UAF on lgr list traversal in smcr_port_err()

smcr_port_err() traverses smc_lgr_list.list without holding
smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched()
to free an lgr while it is still being dereferenced.

Hold smc_lgr_list.lock across the traversal. Update
smc_ib_gid_check() to call smcr_port_err() after releasing the lock.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 541afa10c126b6c22c2a805a559c70cc41fd156e
Version < 34bcf11cd2528ae00bb6d764d808083c66824277
Status affected
Version 541afa10c126b6c22c2a805a559c70cc41fd156e
Version < 0edcc4284392b28826b5d37532b366b291e6e0fa
Status affected
Version 541afa10c126b6c22c2a805a559c70cc41fd156e
Version < 00a59600ae72d24859d0ad1783a78bc921bc2599
Status affected
Version 541afa10c126b6c22c2a805a559c70cc41fd156e
Version < 3d35f069e1c119992000d51236dbe54da2d4e61e
Status affected
Version 541afa10c126b6c22c2a805a559c70cc41fd156e
Version < 3d65a2eb4449fc9658fb860dea893025d028d90e
Status affected
Version 541afa10c126b6c22c2a805a559c70cc41fd156e
Version < a9b968e42690d784c241a0761c10253271f7df5d
Status affected
Version 541afa10c126b6c22c2a805a559c70cc41fd156e
Version < 61cb282fe97b3b0ba32ca09417a693162bf4ae3f
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.8
Status affected
Version 0
Version < 5.8
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.55
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.099
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/34bcf11cd2528ae00bb6d764d808083c66824277
https://git.kernel.org/stable/c/0edcc4284392b28826b5d37532b366b291e6e0fa
https://git.kernel.org/stable/c/00a59600ae72d24859d0ad1783a78bc921bc2599
https://git.kernel.org/stable/c/3d35f069e1c119992000d51236dbe54da2d4e61e
https://git.kernel.org/stable/c/3d65a2eb4449fc9658fb860dea893025d028d90e
https://git.kernel.org/stable/c/a9b968e42690d784c241a0761c10253271f7df5d
https://git.kernel.org/stable/c/61cb282fe97b3b0ba32ca09417a693162bf4ae3f