The vulnerability is a use‑after‑free in the Linux kernel’s SMC‑R networking module. When a receive handler releases its lock, it may acquire a socket reference on memory that has already been freed by a concurrent close operation. This flaw can lead to a kernel panic and provides a denial of service. The flaw is a classic Use‑After‑Free weakness. The likely attack vector is local to the host, requiring a user‑space process that interacts with the SMC‑R socket. Based on the description, it is inferred that the flaw can result in a kernel panic when a receive handler accesses freed memory.

Affected systems are Linux kernel implementations that include the SMC‑R driver. The issue is limited to the SMC‑R socket handling (net/smc) and does not impact other networking subsystems. No specific kernel release is listed in the CVE data, so any kernel version compiling the unpatched SMC‑R code is potentially vulnerable.

Because the flaw is local and requires coordination with a user‑space socket in the SMC‑R protocol, the likely attack vector is local to the host and can be triggered by a user‑space process that opens or closes an SMC‑R socket. The CVSS score of 9.8 indicates critical severity, while an EPSS score of <1% suggests a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The use‑after‑free can lead to a kernel panic and denial of service, so immediate remediation is important.