CVE-2026-80986

CVE-2026-80986 is a slab-out-of-bounds read in the Linux kernel's net/smc subsystem, specifically in smc_llc_save_add_link_rkeys(). On links whose device has max_recv_sge == 1, no shared v2 receive buffer exists, yet the function unconditionally reads the v2 extension starting at offset 68 of a 7...