CVE Database›Document archive›CVE-2026-64005

CVE-2026-64005

kernel: net/smc: Do not re-initialize smc hashtables

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · July 19, 2026

Updated · October 27, 2026

Description

A flaw was found in the Linux kernel's Server Message Block (SMC) network component. This vulnerability occurs because the system's internal tables, known as hashtables, are improperly reset after they have already been initialized and are actively in use. This incorrect re-initialization can lead to a corrupted list within the kernel. Such corruption could potentially cause system instability or other unpredictable behavior.

Statement

SMC hash list heads could be re initialized after the protocol and socket family were already registered. If an SMC socket is created during this initialization window, an existing hash entry may be lost or the hlist state may become corrupted. For the CVSS the PR:L is used for the paranoid score because a local unprivileged process may be able to create AF_SMC sockets or race module autoload, while full administrative control is not necessarily required for the socket operation itself. The issue is not directly network reachable and depends on local timing during SMC initialization. Impact is at least local denial of service via corrupted socket hash state and kernel crash. In the worst still defensible interpretation, hlist corruption in struct sock lifetime management may allow broader confidentiality or integrity impact and should be reviewed manually.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-664 · Improper Control of a Resource Through its Lifetime