CVE-2026-64048

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SMC-D client where the system fails to properly validate the ism dev slot when processing a CHID-0 ACCEPT. Specifically, the smc v2 determine accepted chid() function matches a peer's CHID against an array starting from index 0. If a malicious peer responds to an SMC-Dv2-only proposal with d1.chid equal to 0, it can match an empty slot where ism dev[0] is NULL. This leads to a null-pointer dereference in the smc conn create() function when attempting to access the lgr lock within the smcd dev structure, resulting in a system fault.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.