Local privilege escalation via stale per-network operations

Use-after-free in Linux kernel SMC initialization allows local users to crash the host or escalate to kernel privileges. On an smc_init() failure path, registration errors leave smc_net_ops or smc_net_stat_ops linked after the module storage is released, so later per-network registration dereferences stale callbacks. An unprivileged local user can request SMC module autoload and create network namespaces; successful triggering causes a kernel page fault or enables kernel control-flow hijacking.