CVE-2026-64005
kernel: net/smc: Do not re-initialize smc hashtables
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · October 27, 2026
Description
A flaw was found in the Linux kernel's Server Message Block (SMC) network component. This vulnerability occurs because the system's internal tables, known as hashtables, are improperly reset after they have already been initialized and are actively in use. This incorrect re-initialization can lead to a corrupted list within the kernel. Such corruption could potentially cause system instability or other unpredictable behavior.
Statement
SMC hash list heads could be re initialized after the protocol and socket family were already registered. If an SMC socket is created during this initialization window, an existing hash entry may be lost or the hlist state may become corrupted. For the CVSS the PR:L is used for the paranoid score because a local unprivileged process may be able to create AF_SMC sockets or race module autoload, while full administrative control is not necessarily required for the socket operation itself. The issue is not directly network reachable and depends on local timing during SMC initialization. Impact is at least local denial of service via corrupted socket hash state and kernel crash. In the worst still defensible interpretation, hlist corruption in struct sock lifetime management may allow broader confidentiality or integrity impact and should be reviewed manually.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-664 · Improper Control of a Resource Through its Lifetime