Search: clc-tn.com

CVE-2026-99032 is a use-after-free vulnerability in the Linux kernel's SMC (Shared Memory Communications) subsystem, specifically in the smc_getname function. The flaw occurs because smc_getname dereferences a pointer to a CLC socket without properly holding a lock, allowing asynchronous release of the socket during a getsockname() syscall. This can lead to a use-after-free or NULL pointer dereference, potentially causing kernel crashes or privilege escalation. The vulnerability affects certain Linux kernel versions and has been fixed in version 4.20 and later commits.