CVE-2026-74493

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the net/smc component during link group termination. The function smc lgr terminate() releases the conns lock after locating a connection in lgr->conns all but before obtaining a reference to its socket. Because the connection is embedded in the socket, its registration reference only provides protection while the connection is in the tree. A race condition occurs when a concurrent close operation unregisters the connection and drops the reference, freeing the socket before the termination worker can execute sock hold(). This condition is reachable when a close operation overlaps with link group termination.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.