CVE-2026-80985 Linux CVE debrief

Who should care

Linux kernel maintainers, Linux distribution maintainers, and users of the Linux kernel should review and apply the patches provided by the Linux kernel maintainers, update the Linux kernel to the latest version, and monitor the system for potential exploitation attempts. This includes operators, platform administrators, vulnerability management teams, and security teams who need to assess the impact of this vulnerability on their systems and take

Why it matters

A vulnerability in the Linux kernel's net/smc has been addressed. The SMC-Rv2 LLC messages were not properly handled, allowing oversized messages to be carried in the queue entry. This could lead to deletion of registered rtokens and installation of new rtokens. Linux kernel maintainers, Linux distribution maintainers, and users of the Linux kernel should review and apply the patches provided by the Linux kernel maintainers, update the Linux kernel to the latest version, and monitor the system for potential exploitation attempts.

• Deletion of registered rtokens
• Installation of new rtokens via ADD_LINK
• Potential disruption of SMC-Rv2 LLC message handling
• Verification of rtokens and their registration status

Technical summary

The Linux kernel's net/smc did not properly handle oversized SMC-Rv2 LLC messages. The issue has been resolved by copying the tail into the queue entry and declaring rkeys that fit inline as a member of the union. This vulnerability affects the Linux kernel's net/smc, allowing oversized messages to be carried in the queue entry. This could lead to deletion of registered rtokens and installation of new rtokens via ADD_LINK. The patch provided by the Linux kernel maintainers addresses this issue by properly handling oversized messages.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the patches provided by the Linux kernel maintainers
• Update the Linux kernel to the latest version
• Monitor the system for potential exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability. Three source references from the Linux kernel Git repository are also available. The vulnerability affects the Linux kernel's net/smc, allowing oversized SMC-Rv2 LLC messages to be carried in the queue entry. This could lead to deletion of registered rtokens and installation of new rtokens. The issue has been resolved by copying the tail into the queue entry and declaring rkeys that fit inline as a member of the union. The patch provided by the

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.