A memory handling vulnerability in the Linux kernel SMC-Rv2 subsystem could allow remote attackers to perform unauthorized operations, resulting in service disruption or integrity compromise.

The vulnerability exists in the smc_llc_rmt_delete_rkey and smc_llc_save_add_link_rkeys functions, which fail to properly validate the size of incoming SMC-Rv2 messages. An unauthenticated remote attacker can supply oversized messages, causing the kernel to process stale data from the receive buffer and leading to improper rtoken manipulation.

The flaw carries a CVSS score of 8.2, reflecting a high risk due to the potential for service disruption (Denial of Service) and unauthorized integrity changes. Successful exploitation could lead to system instability or the corruption of critical network session tokens, potentially allowing for unauthorized access to data streams or denial of service for legitimate users.

Immediate Action: Update the Linux kernel to version 6.18.50, 7.2.4, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected network stack errors, particularly those related to the SMC-Rv2 subsystem.

Compensating Controls: If patching is not immediately feasible, consider disabling the SMC (Shared Memory Communications) protocol via kernel module configuration if it is not required for production workloads.

Public Exploit Available: No

Given the high CVSS severity and the critical nature of the Linux kernel, organizations should prioritize testing and deploying the identified security patches. Administrators must verify their kernel versions and apply the upstream fixes or distribution-specific updates as soon as they become available to mitigate the risk of remote memory corruption and service instability.