In the Linux kernel, the following vulnerability has been resolved: net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() There is a certain chance to trigger the following panic: PID: 5900 TASK: ffff88c1c8af4100 CPU: 1 COMMAND: "kworker/1:48" #0 [ffff9456c1cc79a0] machine_kexec at ffffffff870665b7 #1 [ffff9456c1cc79f0] __crash_kexec at ffffffff871b4c7a #2 [ffff9456c1cc7ab0] crash_kexec at ffffffff871b5b60 #3 [ffff9456c1cc7ac0] oops_end at ffffffff87026ce7 #4 [ffff9456c1cc7ae0] page_fault_oops at ffffffff87075715 #5 [ffff9456c1cc7b58] exc_page_fault at ffffffff87ad0654 #6 [ffff9456c1cc7b80] asm_exc_page_fault at ffffffff87c00b62 [exception RIP: ib_alloc_mr+19] RIP: ffffffffc0c9cce3 RSP: ffff9456c1cc7c38 RFLAGS: 00010202 RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000004 RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff88c1ea281d00 R8: 000000020a34ffff R9: ffff88c1350bbb20 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000010 R14: ffff88c1ab040a50 R15: ffff88c1ea281d00 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #7 [ffff9456c1cc7c60] smc_ib_get_memory_region at ffffffffc0aff6df [smc] #8 [ffff9456c1cc7c88] smcr_buf_map_link at ffffffffc0b0278c [smc] #9 [ffff9456c1cc7ce0] __smc_buf_create at ffffffffc0b03586 [smc] The reason here is that when the server tries to create a second link, smc_llc_srv_add_link() has no protection and may add a new link to link group. This breaks the security environment protected by llc_conf_mutex.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013543 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()

    There is a certain chance to trigger the following panic:

    PID: 5900   TASK: ffff88c1c8af4100  CPU: 1   COMMAND: kworker/1:48      #0 [ffff9456c1cc79a0] machine_kexec at ffffffff870665b7      #1 [ffff9456c1cc79f0] __crash_kexec at ffffffff871b4c7a      #2 [ffff9456c1cc7ab0] crash_kexec at ffffffff871b5b60      #3 [ffff9456c1cc7ac0] oops_end at ffffffff87026ce7      #4 [ffff9456c1cc7ae0] page_fault_oops at ffffffff87075715      #5 [ffff9456c1cc7b58] exc_page_fault at ffffffff87ad0654      #6 [ffff9456c1cc7b80] asm_exc_page_fault at ffffffff87c00b62         [exception RIP: ib_alloc_mr+19]         RIP: ffffffffc0c9cce3  RSP: ffff9456c1cc7c38  RFLAGS: 00010202         RAX: 0000000000000000  RBX: 0000000000000002  RCX: 0000000000000004         RDX: 0000000000000010  RSI: 0000000000000000  RDI: 0000000000000000         RBP: ffff88c1ea281d00   R8: 000000020a34ffff   R9: ffff88c1350bbb20         R10: 0000000000000000  R11: 0000000000000001  R12: 0000000000000000         R13: 0000000000000010  R14: ffff88c1ab040a50  R15: ffff88c1ea281d00         ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018      #7 [ffff9456c1cc7c60] smc_ib_get_memory_region at ffffffffc0aff6df [smc]      #8 [ffff9456c1cc7c88] smcr_buf_map_link at ffffffffc0b0278c [smc]      #9 [ffff9456c1cc7ce0] __smc_buf_create at ffffffffc0b03586 [smc]

    The reason here is that when the server tries to create a second link,     smc_llc_srv_add_link() has no protection and may add a new link to     link group. This breaks the security environment protected by     llc_conf_mutex.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011239 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()

    There is a certain chance to trigger the following panic:

    PID: 5900   TASK: ffff88c1c8af4100  CPU: 1   COMMAND: kworker/1:48      #0 [ffff9456c1cc79a0] machine_kexec at ffffffff870665b7      #1 [ffff9456c1cc79f0] __crash_kexec at ffffffff871b4c7a      #2 [ffff9456c1cc7ab0] crash_kexec at ffffffff871b5b60      #3 [ffff9456c1cc7ac0] oops_end at ffffffff87026ce7      #4 [ffff9456c1cc7ae0] page_fault_oops at ffffffff87075715      #5 [ffff9456c1cc7b58] exc_page_fault at ffffffff87ad0654      #6 [ffff9456c1cc7b80] asm_exc_page_fault at ffffffff87c00b62         [exception RIP: ib_alloc_mr+19]         RIP: ffffffffc0c9cce3  RSP: ffff9456c1cc7c38  RFLAGS: 00010202         RAX: 0000000000000000  RBX: 0000000000000002  RCX: 0000000000000004         RDX: 0000000000000010  RSI: 0000000000000000  RDI: 0000000000000000         RBP: ffff88c1ea281d00   R8: 000000020a34ffff   R9: ffff88c1350bbb20         R10: 0000000000000000  R11: 0000000000000001  R12: 0000000000000000         R13: 0000000000000010  R14: ffff88c1ab040a50  R15: ffff88c1ea281d00         ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018      #7 [ffff9456c1cc7c60] smc_ib_get_memory_region at ffffffffc0aff6df [smc]      #8 [ffff9456c1cc7c88] smcr_buf_map_link at ffffffffc0b0278c [smc]      #9 [ffff9456c1cc7ce0] __smc_buf_create at ffffffffc0b03586 [smc]

    The reason here is that when the server tries to create a second link,     smc_llc_srv_add_link() has no protection and may add a new link to     link group. This breaks the security environment protected by     llc_conf_mutex.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() There is a certain chance to     trigger the following panic: PID: 5900 TASK: ffff88c1c8af4100 CPU: 1 COMMAND: kworker/1:48 #0     [ffff9456c1cc79a0] machine_kexec at ffffffff870665b7 #1 [ffff9456c1cc79f0] __crash_kexec at     ffffffff871b4c7a #2 [ffff9456c1cc7ab0] crash_kexec at ffffffff871b5b60 #3 [ffff9456c1cc7ac0] oops_end at     ffffffff87026ce7 #4 [ffff9456c1cc7ae0] page_fault_oops at ffffffff87075715 #5 [ffff9456c1cc7b58]     exc_page_fault at ffffffff87ad0654 #6 [ffff9456c1cc7b80] asm_exc_page_fault at ffffffff87c00b62 [exception     RIP: ib_alloc_mr+19] RIP: ffffffffc0c9cce3 RSP: ffff9456c1cc7c38 RFLAGS: 00010202 RAX: 0000000000000000     RBX: 0000000000000002 RCX: 0000000000000004 RDX: 0000000000000010 RSI: 0000000000000000 RDI:
    0000000000000000 RBP: ffff88c1ea281d00 R8: 000000020a34ffff R9: ffff88c1350bbb20 R10: 0000000000000000     R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000010 R14: ffff88c1ab040a50 R15:
    ffff88c1ea281d00 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #7 [ffff9456c1cc7c60]     smc_ib_get_memory_region at ffffffffc0aff6df [smc] #8 [ffff9456c1cc7c88] smcr_buf_map_link at     ffffffffc0b0278c [smc] #9 [ffff9456c1cc7ce0] __smc_buf_create at ffffffffc0b03586 [smc] The reason here is     that when the server tries to create a second link, smc_llc_srv_add_link() has no protection and may add a     new link to link group. This breaks the security environment protected by llc_conf_mutex. (CVE-2023-54237)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
309533	Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013543)	Nessus	Unity Linux Local Security Checks	medium
308419	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-011239)	Nessus	Unity Linux Local Security Checks	medium
280728	Linux Distros Unpatched Vulnerability : CVE-2023-54237	Nessus	Misc.	medium

Detections

Analytics

CVE-2023-54237

medium

Tenable Plugins

medium

medium

medium