In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INIT_HLIST_HEAD(&smc_v_hashinfo.ht)… (CVE-2026-64005)
In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) are called after smc_nl_init(), proto_register() and sock_register(). This can lead to smc_v*_hashinfo.ht being reset even though hash entries already exist and are being used, possibly resulting in a corrupted list. Remove unnecessary and dangerous re-initialisation of smc_v*_hashinfo.ht in smc_init(); it is implicitly initialised to zero anyhow. Add HLIST_HEAD_INIT to the definitions for clarity.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-64005 concerns the net/smc component where the smc hashtables (smc_v*_hashinfo.ht) were re-initialized after being set up and potentially containing active entries. Specifically, INIT_HLIST_HEAD(&smc_v_hashinfo.ht) was called after smc_nl_init(), proto_register(), and sock_register(), which could reset the hash tables despite existing entries, possibly corrupting the list. The fix removes this redundant and unsafe re-initialization in smc_init(), as the hashtables are already implicitly zero-initialized. Additionally, HLIST_HEAD_INIT was added to the definitions for clarity.
Potential Impact
The vulnerability could lead to corruption of the smc hashtable lists within the kernel, potentially causing instability or unexpected behavior in the affected subsystem. No known exploits in the wild have been reported. The impact is limited to the internal kernel data structure integrity in the net/smc module.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source to remove the unsafe re-initialization of the smc hashtables. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply them accordingly.
In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INIT_HLIST_HEAD(&smc_v_hashinfo.ht)… (CVE-2026-64005)
Description
In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables INIT_HLIST_HEAD(&smc_v*_hashinfo.ht) are called after smc_nl_init(), proto_register() and sock_register(). This can lead to smc_v*_hashinfo.ht being reset even though hash entries already exist and are being used, possibly resulting in a corrupted list. Remove unnecessary and dangerous re-initialisation of smc_v*_hashinfo.ht in smc_init(); it is implicitly initialised to zero anyhow. Add HLIST_HEAD_INIT to the definitions for clarity.
CVSS v3.1
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-64005 concerns the net/smc component where the smc hashtables (smc_v*_hashinfo.ht) were re-initialized after being set up and potentially containing active entries. Specifically, INIT_HLIST_HEAD(&smc_v_hashinfo.ht) was called after smc_nl_init(), proto_register(), and sock_register(), which could reset the hash tables despite existing entries, possibly corrupting the list. The fix removes this redundant and unsafe re-initialization in smc_init(), as the hashtables are already implicitly zero-initialized. Additionally, HLIST_HEAD_INIT was added to the definitions for clarity.
Potential Impact
The vulnerability could lead to corruption of the smc hashtable lists within the kernel, potentially causing instability or unexpected behavior in the affected subsystem. No known exploits in the wild have been reported. The impact is limited to the internal kernel data structure integrity in the net/smc module.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source to remove the unsafe re-initialization of the smc hashtables. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply them accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hrwp-cv9c-vc93
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64005"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27aa2a4a8d598912d878
Added to database: 07/19/2026, 19:38:18 UTC
Last enriched: 07/19/2026, 19:59:19 UTC
Last updated: 07/20/2026, 21:51:10 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.