In the Linux kernel, the following vulnerability has been resolved:
net/smc: check ipareaoffset and ipv6prefixes_cnt when receiving proposal msg
When receiving proposal msg in server, the field ipareaoffset and the field ipv6prefixescnt in proposal msg are from the remote client and can not be fully trusted. Especially the field ipareaoffset, once exceed the max value, there has the chance to access wrong address, and crash may happen.
This patch checks ipareaoffset and ipv6prefixes_cnt before using them.
[
{
"signature_type": "Line",
"target": {
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91a7c27c1444ed4677b83fd5308d2cf03f5f0851",
"digest": {
"line_hashes": [
"195095840234076755294375487723698911442",
"52658450387440055623825003509313599826",
"11789982443074468350249739285709020208",
"183808659027572396325074135981672519639",
"329583024400417297022690121113226890559",
"113413407627545805643367992538677557564",
"169601260404814647627774552645180789613",
"132831499932512422540042206539539763468"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-00199499",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f10635268a0a49ee902a3b63b5dbb76f4fed498e",
"digest": {
"line_hashes": [
"286008578733118898419070284901163920443",
"83303734408376784918827031883186183022",
"183086183686314090151986631447287346824",
"194840014840777533950030362406878993477",
"294275268561074859990022489252501915694",
"98131704428055355839413531551431649548"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-01acf909",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47ce46349672a7e0c361bfe39ed0b22e824ef4fb",
"digest": {
"line_hashes": [
"213278234263678131731520466084788674999",
"212144612532684468707643886541454883581",
"250509689672755682391401059717690128651",
"223193196858395986189929681556220314883"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-04f290e9",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62056d1592e63d85e82357ee2ae6a6a294f440b0",
"digest": {
"line_hashes": [
"213278234263678131731520466084788674999",
"212144612532684468707643886541454883581",
"250509689672755682391401059717690128651",
"223193196858395986189929681556220314883"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-08273854",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47ce46349672a7e0c361bfe39ed0b22e824ef4fb",
"digest": {
"line_hashes": [
"195095840234076755294375487723698911442",
"52658450387440055623825003509313599826",
"11789982443074468350249739285709020208",
"183808659027572396325074135981672519639",
"329583024400417297022690121113226890559",
"113413407627545805643367992538677557564",
"169601260404814647627774552645180789613",
"132831499932512422540042206539539763468"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-0acdeef6",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91a7c27c1444ed4677b83fd5308d2cf03f5f0851",
"digest": {
"line_hashes": [
"213278234263678131731520466084788674999",
"212144612532684468707643886541454883581",
"250509689672755682391401059717690128651",
"223193196858395986189929681556220314883"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-12384915",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_find_ism_v1_device_serv",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@846bada23bfcdeb83621b045ed85dc06c7833ff0",
"digest": {
"length": 493.0,
"function_hash": "279566373733130265958168679672744829289"
},
"id": "CVE-2024-49571-1da8cf24",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62056d1592e63d85e82357ee2ae6a6a294f440b0",
"digest": {
"line_hashes": [
"195095840234076755294375487723698911442",
"52658450387440055623825003509313599826",
"11789982443074468350249739285709020208",
"183808659027572396325074135981672519639",
"329583024400417297022690121113226890559",
"113413407627545805643367992538677557564",
"169601260404814647627774552645180789613",
"182552332729712962619202503300535445354"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-2c41a695",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_find_ism_v1_device_serv",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a29e220d3c8edbf0e1beb0f028878a4a85966556",
"digest": {
"length": 645.0,
"function_hash": "34033159536919682452031262414493747728"
},
"id": "CVE-2024-49571-3763df9f",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f10635268a0a49ee902a3b63b5dbb76f4fed498e",
"digest": {
"line_hashes": [
"195095840234076755294375487723698911442",
"52658450387440055623825003509313599826",
"11789982443074468350249739285709020208",
"183808659027572396325074135981672519639",
"329583024400417297022690121113226890559",
"113413407627545805643367992538677557564",
"169601260404814647627774552645180789613",
"182552332729712962619202503300535445354"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-40b30869",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@846bada23bfcdeb83621b045ed85dc06c7833ff0",
"digest": {
"line_hashes": [
"195095840234076755294375487723698911442",
"52658450387440055623825003509313599826",
"11789982443074468350249739285709020208",
"183808659027572396325074135981672519639",
"31359490646551173376232527678845864551",
"188584099607235732423452189720897272054",
"43593697854684144647823793280541401225",
"182552332729712962619202503300535445354"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-443a8a67",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a29e220d3c8edbf0e1beb0f028878a4a85966556",
"digest": {
"line_hashes": [
"213278234263678131731520466084788674999",
"212144612532684468707643886541454883581",
"250509689672755682391401059717690128651",
"223193196858395986189929681556220314883"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-46940a94",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_proposal_get_prefix",
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47ce46349672a7e0c361bfe39ed0b22e824ef4fb",
"digest": {
"length": 154.0,
"function_hash": "6539189370181038174175462886607594192"
},
"id": "CVE-2024-49571-6134e7e3",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_msg_prop_valid",
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@846bada23bfcdeb83621b045ed85dc06c7833ff0",
"digest": {
"length": 884.0,
"function_hash": "76777070388438101031580282515250714171"
},
"id": "CVE-2024-49571-630db628",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_listen_prfx_check",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f10635268a0a49ee902a3b63b5dbb76f4fed498e",
"digest": {
"length": 261.0,
"function_hash": "45558662815636268335803091653049749943"
},
"id": "CVE-2024-49571-66becf45",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_listen_prfx_check",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91a7c27c1444ed4677b83fd5308d2cf03f5f0851",
"digest": {
"length": 261.0,
"function_hash": "45558662815636268335803091653049749943"
},
"id": "CVE-2024-49571-68f12be3",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_msg_prop_valid",
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f10635268a0a49ee902a3b63b5dbb76f4fed498e",
"digest": {
"length": 884.0,
"function_hash": "76777070388438101031580282515250714171"
},
"id": "CVE-2024-49571-6b49754f",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_msg_prop_valid",
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91a7c27c1444ed4677b83fd5308d2cf03f5f0851",
"digest": {
"length": 884.0,
"function_hash": "76777070388438101031580282515250714171"
},
"id": "CVE-2024-49571-6cdb2e59",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a29e220d3c8edbf0e1beb0f028878a4a85966556",
"digest": {
"line_hashes": [
"286008578733118898419070284901163920443",
"83303734408376784918827031883186183022",
"183086183686314090151986631447287346824",
"194840014840777533950030362406878993477",
"294275268561074859990022489252501915694",
"98131704428055355839413531551431649548"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-761a7bf0",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_listen_prfx_check",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@846bada23bfcdeb83621b045ed85dc06c7833ff0",
"digest": {
"length": 261.0,
"function_hash": "45558662815636268335803091653049749943"
},
"id": "CVE-2024-49571-808c69dc",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_msg_prop_valid",
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62056d1592e63d85e82357ee2ae6a6a294f440b0",
"digest": {
"length": 884.0,
"function_hash": "76777070388438101031580282515250714171"
},
"id": "CVE-2024-49571-82675909",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_find_ism_v1_device_serv",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91a7c27c1444ed4677b83fd5308d2cf03f5f0851",
"digest": {
"length": 645.0,
"function_hash": "34033159536919682452031262414493747728"
},
"id": "CVE-2024-49571-88fd24e3",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_msg_prop_valid",
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a29e220d3c8edbf0e1beb0f028878a4a85966556",
"digest": {
"length": 884.0,
"function_hash": "76777070388438101031580282515250714171"
},
"id": "CVE-2024-49571-8a2f2716",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_proposal_get_prefix",
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f10635268a0a49ee902a3b63b5dbb76f4fed498e",
"digest": {
"length": 154.0,
"function_hash": "6539189370181038174175462886607594192"
},
"id": "CVE-2024-49571-8fd44234",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_proposal_get_prefix",
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a29e220d3c8edbf0e1beb0f028878a4a85966556",
"digest": {
"length": 154.0,
"function_hash": "6539189370181038174175462886607594192"
},
"id": "CVE-2024-49571-942742a7",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_listen_prfx_check",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47ce46349672a7e0c361bfe39ed0b22e824ef4fb",
"digest": {
"length": 261.0,
"function_hash": "45558662815636268335803091653049749943"
},
"id": "CVE-2024-49571-9b888713",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_find_ism_v1_device_serv",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f10635268a0a49ee902a3b63b5dbb76f4fed498e",
"digest": {
"length": 560.0,
"function_hash": "165356277494891816468782730802816079224"
},
"id": "CVE-2024-49571-9c04fa5e",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_listen_prfx_check",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a29e220d3c8edbf0e1beb0f028878a4a85966556",
"digest": {
"length": 261.0,
"function_hash": "45558662815636268335803091653049749943"
},
"id": "CVE-2024-49571-a2e0b0c2",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_find_ism_v1_device_serv",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62056d1592e63d85e82357ee2ae6a6a294f440b0",
"digest": {
"length": 595.0,
"function_hash": "334100761125095269745278697763118745763"
},
"id": "CVE-2024-49571-a311ca7d",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62056d1592e63d85e82357ee2ae6a6a294f440b0",
"digest": {
"line_hashes": [
"286008578733118898419070284901163920443",
"83303734408376784918827031883186183022",
"183086183686314090151986631447287346824",
"194840014840777533950030362406878993477",
"294275268561074859990022489252501915694",
"98131704428055355839413531551431649548"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-a9aea561",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_msg_prop_valid",
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47ce46349672a7e0c361bfe39ed0b22e824ef4fb",
"digest": {
"length": 884.0,
"function_hash": "76777070388438101031580282515250714171"
},
"id": "CVE-2024-49571-ab7baf77",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@846bada23bfcdeb83621b045ed85dc06c7833ff0",
"digest": {
"line_hashes": [
"213278234263678131731520466084788674999",
"212144612532684468707643886541454883581",
"250509689672755682391401059717690128651",
"223193196858395986189929681556220314883"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-b5472ee6",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47ce46349672a7e0c361bfe39ed0b22e824ef4fb",
"digest": {
"line_hashes": [
"286008578733118898419070284901163920443",
"83303734408376784918827031883186183022",
"183086183686314090151986631447287346824",
"194840014840777533950030362406878993477",
"294275268561074859990022489252501915694",
"98131704428055355839413531551431649548"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-b57b4ac6",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91a7c27c1444ed4677b83fd5308d2cf03f5f0851",
"digest": {
"line_hashes": [
"286008578733118898419070284901163920443",
"83303734408376784918827031883186183022",
"183086183686314090151986631447287346824",
"194840014840777533950030362406878993477",
"294275268561074859990022489252501915694",
"98131704428055355839413531551431649548"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-c8c534d6",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_proposal_get_prefix",
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62056d1592e63d85e82357ee2ae6a6a294f440b0",
"digest": {
"length": 154.0,
"function_hash": "6539189370181038174175462886607594192"
},
"id": "CVE-2024-49571-ce50a119",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@846bada23bfcdeb83621b045ed85dc06c7833ff0",
"digest": {
"line_hashes": [
"286008578733118898419070284901163920443",
"83303734408376784918827031883186183022",
"183086183686314090151986631447287346824",
"194840014840777533950030362406878993477",
"294275268561074859990022489252501915694",
"98131704428055355839413531551431649548"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-d64e9cc4",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/smc_clc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f10635268a0a49ee902a3b63b5dbb76f4fed498e",
"digest": {
"line_hashes": [
"213278234263678131731520466084788674999",
"212144612532684468707643886541454883581",
"250509689672755682391401059717690128651",
"223193196858395986189929681556220314883"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-da8ad378",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a29e220d3c8edbf0e1beb0f028878a4a85966556",
"digest": {
"line_hashes": [
"195095840234076755294375487723698911442",
"52658450387440055623825003509313599826",
"11789982443074468350249739285709020208",
"183808659027572396325074135981672519639",
"329583024400417297022690121113226890559",
"113413407627545805643367992538677557564",
"169601260404814647627774552645180789613",
"132831499932512422540042206539539763468"
],
"threshold": 0.9
},
"id": "CVE-2024-49571-de527057",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_proposal_get_prefix",
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91a7c27c1444ed4677b83fd5308d2cf03f5f0851",
"digest": {
"length": 154.0,
"function_hash": "6539189370181038174175462886607594192"
},
"id": "CVE-2024-49571-e304b7a8",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_clc_proposal_get_prefix",
"file": "net/smc/smc_clc.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@846bada23bfcdeb83621b045ed85dc06c7833ff0",
"digest": {
"length": 154.0,
"function_hash": "6539189370181038174175462886607594192"
},
"id": "CVE-2024-49571-f5db2657",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_listen_prfx_check",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62056d1592e63d85e82357ee2ae6a6a294f440b0",
"digest": {
"length": 261.0,
"function_hash": "45558662815636268335803091653049749943"
},
"id": "CVE-2024-49571-fb00d377",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"target": {
"function": "smc_find_ism_v1_device_serv",
"file": "net/smc/af_smc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47ce46349672a7e0c361bfe39ed0b22e824ef4fb",
"digest": {
"length": 645.0,
"function_hash": "34033159536919682452031262414493747728"
},
"id": "CVE-2024-49571-ff4e97fe",
"signature_version": "v1",
"deprecated": false
}
]