by Kastro
Paper/Archive/CVE-2024-47408

CVE-2024-47408

Linux Linux — net/smc: check smcd_v2_ext_offset when receiving proposal msg

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.6.506 × 2010.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: net/smc: check smcd_v2_ext_offset when receiving proposal msg When receiving proposal msg in server, the field smcd_v2_ext_offset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcd_v2_ext_offset exceed the max value, there has the chance to access wrong address, and crash may happen. This patch checks the value of smcd_v2_ext_offset before using it.

Affected

ProductAffectedFixed inSource
Linux5c21c4ccafe85906db809de3af391fd434df8a27 – < 35da53027c1f2efdd7d0177dc00584134204761a35da53027c1f2efdd7d0177dc00584134204761aCNA
Linux5c21c4ccafe85906db809de3af391fd434df8a27 – < a36364d8d4fabb105001f992fb8ff2d3546203d6a36364d8d4fabb105001f992fb8ff2d3546203d6CNA
Linux5c21c4ccafe85906db809de3af391fd434df8a27 – < e1cc8be2a785a8f1ce1f597f3e608602c5fccd46e1cc8be2a785a8f1ce1f597f3e608602c5fccd46CNA
Linux5c21c4ccafe85906db809de3af391fd434df8a27 – < 935caf324b445fe73d7708fae6f7176fb243f357935caf324b445fe73d7708fae6f7176fb243f357CNA
Linux5c21c4ccafe85906db809de3af391fd434df8a27 – < 48d5a8a304a643613dab376a278f29d3e22f7c3448d5a8a304a643613dab376a278f29d3e22f7c34CNA
Linux5c21c4ccafe85906db809de3af391fd434df8a27 – < 9ab332deb671d8f7e66d82a2ff2b3f715bc3a4ad9ab332deb671d8f7e66d82a2ff2b3f715bc3a4adCNA
Linux5.105.10.271CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/35da53027c1f2efdd7d0177dc00584134204761arefgit.kernel.org/stable/c/a36364d8d4fabb105001f992fb8ff2d3546203d6refgit.kernel.org/stable/c/e1cc8be2a785a8f1ce1f597f3e608602c5fccd46refgit.kernel.org/stable/c/935caf324b445fe73d7708fae6f7176fb243f357refgit.kernel.org/stable/c/48d5a8a304a643613dab376a278f29d3e22f7c34refgit.kernel.org/stable/c/9ab332deb671d8f7e66d82a2ff2b3f715bc3a4adreflists.debian.org/debian-lts-announce/2025/03/msg00001.html