CVE-2026-98559

Description

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port_err() smcr_port_err() traverses smc_lgr_list.list without holding smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced. Hold smc_lgr_list.lock across the traversal. Update smc_ib_gid_check() to call smcr_port_err() after releasing the lock.

Is your site exposed to CVE-2026-98559?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0021

Probability of exploitation

0.11%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/00a59600ae72d24859d0ad1783a78bc921bc2599 https://git.kernel.org/stable/c/0edcc4284392b28826b5d37532b366b291e6e0fa https://git.kernel.org/stable/c/34bcf11cd2528ae00bb6d764d808083c66824277 https://git.kernel.org/stable/c/3d35f069e1c119992000d51236dbe54da2d4e61e https://git.kernel.org/stable/c/3d65a2eb4449fc9658fb860dea893025d028d90e https://git.kernel.org/stable/c/61cb282fe97b3b0ba32ca09417a693162bf4ae3f https://git.kernel.org/stable/c/a9b968e42690d784c241a0761c10253271f7df5d

Frequently Asked Questions

What is CVE-2026-98559? +

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port_err() smcr_port_err() traverses smc_lgr_list.list without holding smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched() to free an lgr while it is still being dereferenced. Hold smc_lgr_list.lock across the traversal. Update smc_ib_gid_check() to call smcr_port_err() after releasing the lock.

How do I check if I'm vulnerable to CVE-2026-98559? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.