The flaw arises when the smc kernel module reinitializes its internal hash tables after they have already been populated. This resets internal pointers and can corrupt linked lists, potentially causing a kernel panic or other memory corruption. The nature of the defect is a classic use of reinitialization that can destroy data integrity and stability within the kernel.

All Linux kernel deployments are affected, as the vulnerability is located in the core net/smc stack of the kernel. No specific vendor or distribution versions are listed; the issue applies to any kernel containing the current smc implementation that has not been patched by the upstream fix.

With a CVSS score of 7.8 the defect is evaluated as high severity. The EPSS score of < 1% indicates a very low probability of exploitation in the wild at this time. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector, based on the description, would involve triggering the smc initialization—possibly through protocol, socket, or registration calls—which would require at least local or privileged access. While there is no publicly known exploit, the potential for a denial of service or further memory corruption makes the risk significant for systems running unpatched kernels.