Linux Kernel Vulnerability in SMC-D Socket Management

CVE-2026-52941

What is CVE-2026-52941?

A vulnerability exists in the Linux kernel's socket management, specifically within the SMC-D protocol. This flaw arises due to a NULL dereferencing of the connection link when enabling the smc_msg_event tracepoint. Under certain conditions, this could lead to a crash during the first sendmsg()/recvmsg() operation on an SMC-D socket, presenting a risk to system stability and integrity. The issue is particularly impactful as the tracepoint requires root access to enable, yet triggering it is possible without privileged capabilities, thus exposing systems to potential exploitation. The recommended solution involves logging an empty device name instead of allowing the NULL dereference to occur.

References