CVE-2024-47408
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In the Linux kernel's net/smc module, when receiving a proposal message on the server, the field smcd_v2_ext_offset comes from the remote client and is not fully trusted. If the value of smcd_v2_ext_offset exceeds the maximum value, it may lead to accessing an incorrect address and system crash. The patch adds validation of smcd_v2_ext_offset before use.
Risk Assessment
The organization may experience system crashes due to a crafted message from a remote client, potentially leading to service disruption and availability issues.
Recommendation
Apply a Linux kernel update containing the fix for CVE-2024-47408, which adds validation of smcd_v2_ext_offset before use.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: net/smc: check smcd_v2_ext_offset when receiving proposal msg When receiving proposal msg in server, the field smcd_v2_ext_offset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcd_v2_ext_offset exceed the max value, there has the chance to access wrong address, and crash may happen. This patch checks the value of smcd_v2_ext_offset before using it.