CVE-2024-49568
- Source
- https://cve.org/CVERecord?id=CVE-2024-49568
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49568.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-49568
- Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
MGASA (2)
OESA (2)
ROOT (3)
SUSE (9)
- Related
- Published
- 2025-01-11T12:35:36Z
- Modified
- 2026-10-17T02:34:49Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
When receiving proposal msg in server, the fields v2_ext_offset/ eid_cnt/ism_gid_cnt in proposal msg are from the remote client and can not be fully trusted. Especially the field v2_ext_offset, once exceed the max value, there has the chance to access wrong address, and crash may happen.
This patch checks the fields v2_ext_offset/eid_cnt/ism_gid_cnt before using them.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49568.json" }- References
-
- https://git.kernel.org/stable/c/295a92e3df32e72aff0f4bc25c310e349d07ffbf
- https://git.kernel.org/stable/c/42f6beb2d5779429417b5f8115a4e3fa695d2a6c
- https://git.kernel.org/stable/c/49798283fce4c1a24fb1ba4c7c39127739535571
- https://git.kernel.org/stable/c/690b9a8db9460d065785548e43fd6a02d247c1b7
- https://git.kernel.org/stable/c/7863c9f3d24ba49dbead7e03dfbe40deb5888fdf
- https://git.kernel.org/stable/c/9cc0170ae646876aa5de2f0cad3066ce53e86f27
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49568.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-49568
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8c3dca341aea885249e08856c4380300b75d2cf5Fixed9cc0170ae646876aa5de2f0cad3066ce53e86f27Fixed49798283fce4c1a24fb1ba4c7c39127739535571Fixed690b9a8db9460d065785548e43fd6a02d247c1b7Fixed295a92e3df32e72aff0f4bc25c310e349d07ffbfFixed42f6beb2d5779429417b5f8115a4e3fa695d2a6cFixed7863c9f3d24ba49dbead7e03dfbe40deb5888fdf
Linux / Kernel
Package
- Name
- Kernel