Riskcovery

CVE-2024-47408

net/smc: check smcd_v2_ext_offset when receiving proposal msg

State
Published
Severity
9.8 Critical
Published
Jan 11, 2025
Updated
Oct 3, 2026
Reserved
Jan 11, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/smc: check smcd_v2_ext_offset when receiving proposal msg

When receiving proposal msg in server, the field smcd_v2_ext_offset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcd_v2_ext_offset exceed the max value, there has the chance to access wrong address, and crash may happen.

This patch checks the value of smcd_v2_ext_offset before using it.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5c21c4ccafe85906db809de3af391fd434df8a27 to before 35da53027c1f2efdd7d0177dc00584134204761aAffected
  • 5c21c4ccafe85906db809de3af391fd434df8a27 to before a36364d8d4fabb105001f992fb8ff2d3546203d6Affected
  • 5c21c4ccafe85906db809de3af391fd434df8a27 to before e1cc8be2a785a8f1ce1f597f3e608602c5fccd46Affected
  • 5c21c4ccafe85906db809de3af391fd434df8a27 to before 935caf324b445fe73d7708fae6f7176fb243f357Affected
  • 5c21c4ccafe85906db809de3af391fd434df8a27 to before 48d5a8a304a643613dab376a278f29d3e22f7c34Affected
  • 5c21c4ccafe85906db809de3af391fd434df8a27 to before 9ab332deb671d8f7e66d82a2ff2b3f715bc3a4adAffected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.271 through 5.10.*Not affected
  • 5.15.176 through 5.15.*Not affected
  • 6.1.122 through 6.1.*Not affected
  • 6.6.68 through 6.6.*Not affected
  • 6.12.7 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.