A null pointer dereference vulnerability in the Linux kernel Shared Memory Communications subsystem allows unauthenticated network attackers to trigger a kernel panic and system denial of service.

This is a null pointer dereference flaw residing in the network Shared Memory Communications implementation, specifically within the SMC-D client connection handling logic, which can be triggered by an unauthenticated network peer supplying a zeroed channel identifier.

A successful exploit of this vulnerability results in a kernel crash, leading to an immediate denial of service for the affected host. This can disrupt critical business operations, drop active user connections, and require manual system reboots. With a CVSS score of 7.5, the severity is categorized as high due to the potential for complete service interruption without requiring user interaction or authentication.

Immediate Action: Update the Linux kernel to version 5.10.266, 5.15.217, 6.1.175, 6.6.142, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for unexpected kernel panics, stack traces containing null pointer dereferences in the SMC module, or abrupt network disconnections.

Compensating Controls: Restrict network access to untrusted peers using host-based firewalls or network segmentation, especially if the Shared Memory Communications feature is not actively required.

Public Exploit Available: No

Organizations running affected Linux kernel branches must prioritize applying the latest stable kernel updates to mitigate the risk of remote denial of service attacks. Because this vulnerability targets core networking components and requires no privileges to trigger, prompt patching is essential to maintain system stability and availability.