Strix
72.5K

CVE-2026-98559

Unknown

Last modified

CVE-2026-98559 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port_err() smcr_port_err() traverses smc_lgr_list.list without holding smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced. Hold smc_lgr_list.lock across the traversal. Update smc_ib_gid_check() to call smcr_port_err() after releasing the lock..

Description

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port_err() smcr_port_err() traverses smc_lgr_list.list without holding smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced. Hold smc_lgr_list.lock across the traversal. Update smc_ib_gid_check() to call smcr_port_err() after releasing the lock.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 541afa10c126b6c22c2a805a559c70cc41fd156e, < 34bcf11cd2528ae00bb6d764d808083c66824277; >= 541afa10c126b6c22c2a805a559c70cc41fd156e, < 0edcc4284392b28826b5d37532b366b291e6e0fa; >= 541afa10c126b6c22c2a805a559c70cc41fd156e, < 00a59600ae72d24859d0ad1783a78bc921bc2599; >= 541afa10c126b6c22c2a805a559c70cc41fd156e, < 3d35f069e1c119992000d51236dbe54da2d4e61e; >= 541afa10c126b6c22c2a805a559c70cc41fd156e, < 3d65a2eb4449fc9658fb860dea893025d028d90e; >= 541afa10c126b6c22c2a805a559c70cc41fd156e, < a9b968e42690d784c241a0761c10253271f7df5d; >= 541afa10c126b6c22c2a805a559c70cc41fd156e, < 61cb282fe97b3b0ba32ca09417a693162bf4ae3f
LinuxLinux5.8

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98559?
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port_err() smcr_port_err() traverses smc_lgr_list.list without holding smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced. Hold smc_lgr_list.lock across the traversal. Update smc_ib_gid_check() to call smcr_port_err() after releasing the lock.
How severe is CVE-2026-98559?
Severity scoring for CVE-2026-98559 is pending analysis.
How do I fix CVE-2026-98559?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98559?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST