CVE-2024-49568

CVE-2024-49568

Critical · published January 11, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
46.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg

When receiving proposal msg in server, the fields v2_ext_offset/

eid_cnt/ism_gid_cnt in proposal msg are from the remote client

and can not be fully trusted. Especially the field v2_ext_offset,

once exceed the max value, there has the chance to access wrong

address, and crash may happen.

This patch checks the fields v2_ext_offset/eid_cnt/ism_gid_cnt

before using them.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00575 · 46.7th percentile
Published
2025-01-11T18:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 5.10, < 6.6.686.6.68
linux/linux_kernel≥ 6.7, < 6.12.76.12.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
https://git.kernel.org/stable/c/295a92e3df32e72aff0f4bc25c310e349d07ffbf · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/42f6beb2d5779429417b5f8115a4e3fa695d2a6c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/49798283fce4c1a24fb1ba4c7c39127739535571 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/690b9a8db9460d065785548e43fd6a02d247c1b7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7863c9f3d24ba49dbead7e03dfbe40deb5888fdf · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9cc0170ae646876aa5de2f0cad3066ce53e86f27 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 11 JAN 12:35Z
    net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
    cvelistv5