In the Linux kernel, the following vulnerability has been resolved:
smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
smc_clc_prfx_match() is called from smc_listen_work() and not under RCU nor RTNL.
Using sk_dst_get(sk)->dev could trigger UAF.
Let's use __sk_dst_get() and dst_dev_rcu().
Note that the returned value of smc_clc_prfx_match() is not used in the caller.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade rvUpgrade kernel-rt-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modulesUpgrade bpftoolUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debugUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade python3-perfUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-coreUpgrade libperfUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-modules-coreUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-rt-64k-modules-extra | Feb 24, 2026 | Feb 17, 2026 |
| Debian | — | Upgrade linux | Sep 18, 2026 | Nov 12, 2025 |
| Oracle_linux | — | Upgrade kernel | Feb 24, 2026 | Nov 12, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Feb 26, 2026 | Nov 12, 2025 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules | Mar 2, 2026 | Feb 26, 2026 |
| Ubuntu | — | Upgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-64k-6.17Upgrade linux-image-aws-64k-6.17Upgrade linux-image-raspiUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-generic-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-oracle-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-generic-64kUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-oem-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-genericUpgrade linux-image-realtime-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-14-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-virtualUpgrade linux-image-virtual-6.17Upgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-aws-6.17Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1035-nvidia-tegra-rt | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 21, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub