CVE-2026-80986

CVE-2026-80986 is a slab-out-of-bounds read in the Linux kernel's net/smc subsystem, specifically in smc_llc_save_add_link_rkeys(). On links whose device has max_recv_sge == 1, no shared v2 receive buffer exists, yet the function unconditionally reads the v2 extension starting at offset 68 of a 7...

CVE-2026-80985

This vulnerability affects the Linux kernel 's SMC (Shared Memory Communication) subsystem, specifically SMC-Rv2 LLC message handling. The functions smc_llc_rmt_delete_rkey() and smc_llc_save_add_link_rkeys() read the portion of a v2 message exceeding the 44-byte smc_llc_msg union, but bound thei...