Loading vulnerability…
A vulnerability in the Linux kernel net/smc subsystem affects SMC-D client connection handling for SMC-Dv2-only proposals. On the client side, slot 0 of the ism_dev and ism_chid arrays is reserved for an SMC-Dv1 device, while smc_find_ism_v2_device_clnt() populates SMC-Dv2 entries starting at index 1. If no SMC-Dv1 device is selected, slot 0 remains zero-initialized, leaving the device pointer unset and the CHID value at 0. The vulnerable logic in smc_v2_determine_accepted_chid() compared the peer-supplied CHID against the array starting at index 0 using only the CHID value, allowing a peer to send an ACCEPT response with CHID 0 and incorrectly match the empty reserved slot. This causes the selected device index to be set to the uninitialized entry, after which smc_conn_create() dereferences the missing device pointer while accessing the device lock, triggering a kernel NULL pointer dereference and crash. The fix rejects CHID matches unless the corresponding device entry is non-NULL.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A Linux kernel SMC networking flaw where a malicious peer can send CHID 0 and trigger selection of an empty ism_dev slot, leading to a NULL pointer dereference and kernel fault in smc_conn_create().
A Linux kernel vulnerability in net/smc related to improper handling of CHID-0 ACCEPT matching an empty ism_dev slot.
A Linux kernel vulnerability in net/smc related to rejecting CHID-0 ACCEPT matching an empty ism_dev slot.
A specific vulnerability affecting Red Hat Enterprise Linux 9 kernel-related packages, referenced in RHSA-2026:57252.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.