CVE-2026-90107

A flaw was found in the Linux kernel's net/smc component. The smc_llc_flow_stop() function, responsible for stopping a flow, performs a blind memory reset without first freeing a pending queue entry. This can lead to a memory leak if a duplicate link message arrives during a specific timing window, causing the flow->qentry to be overwritten without being deallocated. This vulnerability results in the leakage of kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.