CVE-2026-98559 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, as well as users of the affected Linux kernel versions, should assess exposure and verify the application of patches. Linux distributions and vendors should evaluate the impact on their products and provide guidance to customers. Security teams and vulnerability management teams should review the affected versions and prioritize patching. System administrators and operators should verify the Linux kernel version and

Why it matters

A use-after-free vulnerability in the Linux kernel's net/smc implementation requires holding the smc_lgr_list.lock during smcr_port_err() traversal to prevent lgr from being freed while being dereferenced.

• Verify the Linux kernel version and check if the patch is applied to prevent potential use-after-free errors.
• Monitor the system for potential use-after-free errors to detect possible exploitation attempts.

Technical summary

The smcr_port_err() function in the Linux kernel's net/smc implementation does not hold the smc_lgr_list.lock while traversing the smc_lgr_list.list. This allows a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced, resulting in a use-after-free vulnerability. The vulnerability exists in the Linux kernel's net/smc implementation, affecting users of the affected Linux kernel versions. To address this, the smc_lgr_list.lock should be held across the traversal. The CVE record and source references indicate a use-after-free vulnerability in the Linux kernel's net/smc implementation.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the provided kernel patches to ensure the smc_lgr_list.lock is held during smcr_port_err() traversal.
• Verify the Linux kernel version and check if the patch is applied.
• Monitor the system for potential use-after-free errors.
• Perform a thorough review of the affected Linux kernel versions and assess exposure.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source references indicate a use-after-free vulnerability in the Linux kernel's net/smc implementation. However, details on affected versions, exploitation, and remediation are limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.