CVE-2026-64005

Analyzed Analyzed - Analysis Complete

Kernel Memory Corruption in Linux SMC Subsystem

Publication date: 2026-07-19

Last updated on: 2026-10-16

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) are called after smc_nl_init(), proto_register() and sock_register(). This can lead to smc_v*_hashinfo.ht being reset even though hash entries already exist and are being used, possibly resulting in a corrupted list. Remove unnecessary and dangerous re-initialisation of smc_v*_hashinfo.ht in smc_init(); it is implicitly initialised to zero anyhow. Add HLIST_HEAD_INIT to the definitions for clarity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-07-19

EPSS Evaluated

2026-10-18

NVD

CVE-2026-64005

EUVD

EUVD-2026-45578

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 5.16 (inc) to 6.1.176 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.35 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.143 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.93 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.210 (exc)
linux	linux_kernel	7.1
linux	linux_kernel	From 4.11 (inc) to 5.10.259 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.12 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-667	The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper re-initialization of SMC (Socket Direct) hashtables. The issue occurs when INIT_HLIST_HEAD is called after other initialization steps, potentially resetting existing hash entries and corrupting the list.

Detection Guidance

This vulnerability affects the Linux kernel's SMC (Socket Messaging Channel) module. Detection requires checking kernel logs for SMC-related errors or crashes, such as corrupted hashtable entries or list corruption warnings. Commands like dmesg | grep smc or journalctl -k | grep smc may help identify issues. Ensure your kernel version is checked against the patched version.

Impact Analysis

This could lead to system instability or crashes due to corrupted data structures in the kernel. It may cause network-related services using SMC to malfunction or fail.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a low-level kernel networking issue without clear implications for data protection or privacy requirements.

Mitigation Strategies

Immediately update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If updating is not immediately possible, consider disabling the SMC module by blacklisting it or restricting its use via kernel parameters until the update is applied.

Hi! I’m here to help you understand CVE-2026-64005. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70