CVE-2026-64005

net/smc: Do not re-initialize smc hashtables

State: Published
Severity: 7.8 High
Published: Jul 19, 2026
Updated: Oct 19, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net/smc: Do not re-initialize smc hashtables

INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) are called after smc_nl_init(), proto_register() and sock_register(). This can lead to smc_v*_hashinfo.ht being reset even though hash entries already exist and are being used, possibly resulting in a corrupted list.

Remove unnecessary and dangerous re-initialisation of smc_v*_hashinfo.ht in smc_init(); it is implicitly initialised to zero anyhow. Add HLIST_HEAD_INIT to the definitions for clarity.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-662 Improper Synchronization

Affected Products

Product	Versions
LinuxLinux	f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before cdc79c05cc375f68ae87b0c74fdaac1a5c93155aAffected f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 2006605006e5a4a11d93e1ebdbbe95764d24276fAffected f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 64c96e497d5ada0b90e99bf58f893aa2b73dcfbcAffected f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before ed7a758313011885347b854e97cb95903ef3c3f7Affected f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 0cc9d0ac22d02f1ba1884de5d6de9eaf8b45d82dAffected f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 55cba6b883b41e5922c00ba9d4e3262131f46f1bAffected f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 5ec939367e700722ffbb1b7cacccbb1a3cf0ebd1Affected f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 9e4389b0038781f19f97895186ed941ff8ac1678Affected
LinuxLinux	4.11Affected before 4.11Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.176 through 6.1.Not affected 6.6.143 through 6.6.Not affected 6.12.93 through 6.12.Not affected 6.18.35 through 6.18.Not affected 7.0.12 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before cdc79c05cc375f68ae87b0c74fdaac1a5c93155aAffected
f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 2006605006e5a4a11d93e1ebdbbe95764d24276fAffected
f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 64c96e497d5ada0b90e99bf58f893aa2b73dcfbcAffected
f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before ed7a758313011885347b854e97cb95903ef3c3f7Affected
f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 0cc9d0ac22d02f1ba1884de5d6de9eaf8b45d82dAffected
f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 55cba6b883b41e5922c00ba9d4e3262131f46f1bAffected
f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 5ec939367e700722ffbb1b7cacccbb1a3cf0ebd1Affected
f16a7dd5cf27eeda187425c9c7d96802a549f9c4 to before 9e4389b0038781f19f97895186ed941ff8ac1678Affected

LinuxLinux

4.11Affected
before 4.11Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.176 through 6.1.*Not affected
6.6.143 through 6.6.*Not affected
6.12.93 through 6.12.*Not affected
6.18.35 through 6.18.*Not affected
7.0.12 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.