In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in… (CVE-2026-74719)
A vulnerability in the Linux kernel's SMC (Shared Memory Communications) subsystem was fixed to prevent memory leaks caused by overwriting a queue entry pointer without freeing the previous allocation. Specifically, the smc_llc_event_handler() function did not check if a queue entry was already set before overwriting it upon receiving CONFIRM_LINK or ADD_LINK_CONT messages, leading to a kmalloc-96 memory leak per duplicate message. The fix applies a guard to prevent overwriting when a queue entry is already occupied, ensuring proper freeing of duplicate messages.
AI Analysis
Technical Summary
The Linux kernel vulnerability (CVE-2026-74719) involves the net/smc component's handling of incoming SMC_LLC_CONFIRM_LINK and SMC_LLC_ADD_LINK_CONT messages in the smc_llc_event_handler() function. The code stored an incoming queue entry (qentry) into the local LLC flow without verifying if a qentry was already pending, causing the pointer to be overwritten and the previous allocation to leak memory. The fix adds a guard to prevent overwriting an existing qentry, allowing duplicate messages to be freed properly and preventing memory leaks. The related SMC_LLC_DELETE_LINK branch already had this guard, and the response handling path was unaffected.
Potential Impact
The vulnerability causes a memory leak in the kernel by leaking one kmalloc-96 object per duplicate CONFIRM_LINK or ADD_LINK_CONT message received while a flow is active. This could lead to resource exhaustion over time if exploited by sending repeated duplicate messages. There is no indication of direct code execution or privilege escalation from this issue. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel by adding a guard to prevent overwriting an existing queue entry in the smc_llc_event_handler() function. Users should apply the official kernel update or patch that includes this fix once available. Patch status is not yet confirmed in the provided data; check the vendor or Linux kernel advisories for the current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in… (CVE-2026-74719)
Description
A vulnerability in the Linux kernel's SMC (Shared Memory Communications) subsystem was fixed to prevent memory leaks caused by overwriting a queue entry pointer without freeing the previous allocation. Specifically, the smc_llc_event_handler() function did not check if a queue entry was already set before overwriting it upon receiving CONFIRM_LINK or ADD_LINK_CONT messages, leading to a kmalloc-96 memory leak per duplicate message. The fix applies a guard to prevent overwriting when a queue entry is already occupied, ensuring proper freeing of duplicate messages.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability (CVE-2026-74719) involves the net/smc component's handling of incoming SMC_LLC_CONFIRM_LINK and SMC_LLC_ADD_LINK_CONT messages in the smc_llc_event_handler() function. The code stored an incoming queue entry (qentry) into the local LLC flow without verifying if a qentry was already pending, causing the pointer to be overwritten and the previous allocation to leak memory. The fix adds a guard to prevent overwriting an existing qentry, allowing duplicate messages to be freed properly and preventing memory leaks. The related SMC_LLC_DELETE_LINK branch already had this guard, and the response handling path was unaffected.
Potential Impact
The vulnerability causes a memory leak in the kernel by leaking one kmalloc-96 object per duplicate CONFIRM_LINK or ADD_LINK_CONT message received while a flow is active. This could lead to resource exhaustion over time if exploited by sending repeated duplicate messages. There is no indication of direct code execution or privilege escalation from this issue. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel by adding a guard to prevent overwriting an existing queue entry in the smc_llc_event_handler() function. Users should apply the official kernel update or patch that includes this fix once available. Patch status is not yet confirmed in the provided data; check the vendor or Linux kernel advisories for the current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-6f64-fmvf-65hv
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-74719"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a8a27f0acd9273b499bc6fa
Added to database: 08/22/2026, 22:51:28 UTC
Last enriched: 08/23/2026, 00:39:44 UTC
Last updated: 08/23/2026, 02:32:03 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.