CVE-2026-90065

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net/smc component where IPPROTO SMC sockets fail to release an internal TCP sock, referred to as clcsock, when socket creation fails after the proto->init hook has executed. This occurs because smc inet prot and smc inet6 prot do not define a .destroy hook, and the smc destruct() function returns early unless the sk state is SMC CLOSED. Consequently, an unprivileged user capable of attaching a deny-all BPF program to BPF CGROUP INET SOCK CREATE within their own cgroup can trigger repeated socket creation failures, leading to an unbounded growth of kernel memory due to the leak of tcp sock objects.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.