CVE-2026-64048

A flaw was found in the Linux kernel's Server-Message-Block Direct SMC-D client. A remote attacker can exploit this vulnerability by sending a specially crafted SMC-Dv2 proposal with a Channel Identifier CHID of 0. This malicious proposal can cause a null pointer dereference in the kernel's SMC...

CVE-2026-64048

The CVE-2026-64048 issue is in the Linux kernel SMC-D client (net/smc). A remote peer can reply with CHID 0 to a SMC-Dv2 proposal, matching an empty ism_dev slot and causing ini->ism_selected to 0. This can lead to a NULL pointer dereference in smc_conn_create() when dereferencing ism_dev[0]-&...

PT-2026-61365

In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ism dev slot On the SMC-D client, slot 0 of ini-ism dev/ini-ism chid is reserved for an SMC-Dv1 device. smc find ism v2 device clnt populates V2 entries starting at index 1, so...