The kernel’s SMC network driver contains a use‑after‑free due to traversing the lgr list without holding the required lock, allowing a concurrent termination to free an object while it is still being read. An attacker with sufficient privileges to trigger SMC operations may exploit the flaw to execute arbitrary code in kernel mode or cause a denial of service through a crash. The vulnerability is a classic use‑after‑free (CWE‑416).

All Linux kernel distributions that ship with the SMC (Session Management Control) driver in an unpatched state are affected. Because the CNAs list the product as "Linux: Linux", the flaw applies broadly to any kernel that has not incorporated the patch commits referenced in the advisory. The specific version range is not provided, but any kernel prior to the fix should be considered vulnerable.

The EPSS score is not available, and the flaw is not listed in the CISA KEV catalog, so current public exploitation data is limited. The severity is high but not quantified. The likely attack vector requires local or elevated privileges to interact with the SMC interface; thus, the risk is significant for systems where users can initiate SMC operations, but remote exploitation is not indicated by the available data. The absence of a listed workaround and the lack of an ephemerally exploitable trigger suggests that the most practical mitigation is to apply the patch immediately.