CVE-2026-98559

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98559
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98559.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98559
Downstream
Published
2026-10-18T15:18:26Z
Modified
2026-10-19T02:46:36Z
Summary
net/smc: fix UAF on lgr list traversal in smcr_port_err()
Details

In the Linux kernel, the following vulnerability has been resolved:

net/smc: fix UAF on lgr list traversal in smcr_port_err()

smcr_port_err() traverses smc_lgr_list.list without holding smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced.

Hold smc_lgr_list.lock across the traversal. Update smc_ib_gid_check() to call smcr_port_err() after releasing the lock.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98559.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
541afa10c126b6c22c2a805a559c70cc41fd156e
Fixed
34bcf11cd2528ae00bb6d764d808083c66824277
Fixed
0edcc4284392b28826b5d37532b366b291e6e0fa
Fixed
00a59600ae72d24859d0ad1783a78bc921bc2599
Fixed
3d35f069e1c119992000d51236dbe54da2d4e61e
Fixed
3d65a2eb4449fc9658fb860dea893025d028d90e
Fixed
a9b968e42690d784c241a0761c10253271f7df5d
Fixed
61cb282fe97b3b0ba32ca09417a693162bf4ae3f

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98559.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.8.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.55
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98559.json"