Skip to content
Auto-CTI
Back to today
NEW MEDIUM A3

CVE-2026-80981

A NVD · · CVE-2026-80981

Admiralty grading (A–F · 1–6)

Source reliability

  • A Completely reliable
  • B Usually reliable
  • C Fairly reliable
  • D Not usually reliable
  • E Unreliable
  • F Cannot be judged

Information credibility

  • 1 Confirmed
  • 2 Probably true
  • 3 Possibly true
  • 4 Doubtful
  • 5 Improbable
  • 6 Cannot be judged

NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.

Key metrics

EPSS
0%

Key insight

There is no evidence of active exploitation, threat actors, or strategic implications; the report describes only a single kernel vulnerability with an available patch.

Description

CVE-2026-80981 is a use-after-free vulnerability in the Linux kernel in the net/smc networking subsystem, specifically in the smc_llc_srv_add_link() function. The flaw occurs when the add_llc pointer is used after a queue entry is freed, provided there is no shared v2 receive buffer for the link. Exploitation requires a specific SMC/RDMA configuration and can result in a kernel crash or memory corruption. The vulnerability has been reproduced and is fixed by a kernel patch; exploitation in the wild is not known. Linux systems with the SMC module and RDMA support enabled are affected.

Risk score

0
cvss base
0.00
kev bonus
0.00
epss bonus
0.00
poc bonus
0.00
raw before weight
0.00
industry weight
1.10
freshness factor
1.00
exploitability factor
1.00
days old
0.00
vendor mismatch penalty
0.00

Path: operational

ESC

…