2 matches found
EUVD-2026-49592
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smccdcrxhandler by pinning the socket smccdcrxhandler looks up the connection by token under the link group's connslock, drops the lock, and then dereferences conn and the smcsock derived from it, ending in...
CVE-2026-64541
CVE-2026-64541 – Linux kernel net/smc UAF fix . The vulnerability stems from smc_cdc_rx_handler() dereferencing a socket-connected smc_sock after releasing conns_lock, allowing a race with smc_lgr_unregister_conn() to free memory and potentially use freed memory. The fix pins the socket reference...