In the Linux kernel, the following vulnerability has been resolved:
Revert "net/smc: Introduce TCP ULP support"
This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40.
As reported by Al Viro, the TCP ULP support for SMC is fundamentally broken. The implementation attempts to convert an active TCP socket into an SMC socket by modifying the underlying `struct file`, dentry, and inode in-place, which violates core VFS invariants that assume these structures are immutable for an open file, creating a risk of use after free errors and general system instability.
Given the severity of this design flaw and the fact that cleaner alternatives (e.g., LD_PRELOAD, BPF) exist for legacy application transparency, the correct course of action is to remove this feature entirely.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 17, 2026 | Jun 9, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade rtlaUpgrade python3-perfUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-s390xUpgrade libperf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matched | Sep 15, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-6.8No solution existsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1035-nvidia-tegra | Sep 21, 2026 | Sep 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub