CVE-2026-64005

Last refreshed2026-10-13

Status: UPDATED | Advisory ID: CVE-2026-64005

Key Details

CVE	CVE-2026-64005
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-13
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel
Classified as	CWE-667 (Improper Locking)

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

net/smc: Do not re-initialize smc hashtables

INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) are called after smc_nl_init(),

proto_register() and sock_register(). This can lead to smc_v*_hashinfo.ht

being reset even though hash entries already exist and are being used,

possibly resulting in a corrupted list.

Remove unnecessary and dangerous re-initialisation of smc_v*_hashinfo.ht in

smc_init(); it is implicitly initialised to zero anyhow. Add

HLIST_HEAD_INIT to the definitions for clarity. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-64005
CVE	https://www.cve.org/CVERecord?id=CVE-2026-64005

Source

Reference

NVD

CVE