CVE-2026-46027

A flaw was found in the Linux kernel's net/smc component. A remote attacker could exploit this by sending a Connection Less Connection (CLC) decline message during an early handshake stage. This causes the system to attempt to update link-group level synchronization state before it is properly initialized. This could lead to incorrect state management or unexpected system behavior.

Red Hat has evaluated this issue as having a Moderate severity impact because successful exploitation is constrained to a denial of service via a kernel crash, without exposing system memory or compromising data integrity. The vulnerability requires systems to actively establish or accept Shared Memory Communications (SMC) protocol handshakes over specialized RDMA or ISM network hardware. Because SMC is not configured or utilized in default deployments, typical installations are not routinely exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.