CVE-2026-64541
A critical vulnerability in the Linux kernel’s SMC‑R implementation allows an attacker to trigger a use‑after‑free that can crash the kernel. The flaw occurs when a socket is released while a receive handler still accesses it, leading to a panic. The issue has been fixed in newer kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users running the SMC‑R implementation in an unpatched kernel version are affected.
Real-world impact
An attacker could cause a kernel crash, resulting in a denial of service. If the attacker can execute code in kernel context, they might gain elevated privileges, but the CVE description only indicates a crash.
Why this severity
The CVSS score of 9.8 reflects the high impact of a kernel crash that can bring down the entire system, combined with the lack of authentication or user interaction required. The vulnerability is exploitable remotely with no special privileges, leading to complete loss of confidentiality, integrity, and availability.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the fix for CVE-2026-64541.
NVD-referenced vendor advisory
Timeline
- Jul 27, 2026 · 3d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 13h agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 11h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/1951bffbc6493ec34c…
- git.kernel.org/stable/c/3bfb96d9bc6a7ed0b9…
- git.kernel.org/stable/c/472e9d7c0d5b03be3f…
- git.kernel.org/stable/c/647b19e5cc145a2f1f…
- git.kernel.org/stable/c/8145b432136285e010…
- git.kernel.org/stable/c/8de4f665d0febfb928…
- git.kernel.org/stable/c/9d160b35cc34a2ba82…
- git.kernel.org/stable/c/ce5aa8084329351086…