CVE-2026-80983: Linux kernel · net/smc: fix socket refcount leak in smc_switch_conns()
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in e20227019d9da73f8fdf16f0951c2e188c84933f : update Linux kernel when convenient.
Data as of 30 Oct 2026, 13:05 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
Thin evidence
One scorer or none- Patch
- Available – fixed in e20227019d9da73f8fdf16f0951c2e188c84933f, d89dc1bd8845c669a700eee58c64ebd3cc1b6d2d, d9a879ac25958bdaecb669ce70e58f8e2ff170de +7
Exploitation evidence
Disclosed: evidence found.
CVE published 11 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix for this vulnerability is available in Linux kernel versions 5.10.273, 5.15, and later. Users and administrators should upgrade to these fixed versions to remediate the issue. No additional mitigation steps are required beyond applying the official patch.
Description
A socket reference count leak vulnerability exists in the Linux kernel's smc_switch_conns() function. This flaw causes the smc_sock object to never be destroyed under certain error conditions, leading to persistent allocation of send and receive buffers and preventing network namespaces from being torn down. The issue occurs during link failover events when smc_cdc_get_free_slot() fails, triggering the leak. The vulnerability affects specific Linux kernel versions and has been fixed in later releases.
References
- git.kernel.org/stable/c/8cb289eb764ff18000a33ddbc287d676d8597eea (opens in a new tab)
- git.kernel.org/stable/c/a3378466704e0bbe93aef9769552dca7673a7eb6 (opens in a new tab)
- git.kernel.org/stable/c/e20227019d9da73f8fdf16f0951c2e188c84933f (opens in a new tab)
- git.kernel.org/stable/c/09d7a9e162ee1a269878c126aee3d7eff43e4130 (opens in a new tab)
- git.kernel.org/stable/c/84dea0585f6b538ae895a8b1d025f4897737f3b1 (opens in a new tab)
- git.kernel.org/stable/c/d89dc1bd8845c669a700eee58c64ebd3cc1b6d2d (opens in a new tab)
- git.kernel.org/stable/c/d9a879ac25958bdaecb669ce70e58f8e2ff170de (opens in a new tab)
- git.kernel.org/stable/c/719296c4aa8213d4ac8002e77d5956d436bc98d0 (opens in a new tab)