Linux Kernel Vulnerability in SMC LLC Flow Handling

CVE-2026-74719

What is CVE-2026-74719?

A memory management vulnerability exists in the Linux kernel's handling of SMC LLC flow. Specifically, the issue arises in the smc_llc_event_handler() function when processing incoming CONFIRM_LINK and ADD_LINK_CONT requests. If a second request is received while a previous flow is still active, the function attempts to store the new qentry without verifying if one is already in use, leading to a pointer overwrite and subsequent memory leak. In response to this, a guard has been added to ensure proper handling of messages, thereby securing against unintended memory leaks while maintaining flow integrity.

References