CVE-2024-49568
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
In the Linux kernel, the following vulnerability has been resolved: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg When receiving proposal msg in server, the fields v2_ext_offset/ eid_cnt/ism_gid_cnt in proposal msg are from the remote client and can not be fully trusted. Especially the field v2_ext_offset, once exceed the max value, there has the chance to access wrong address, and crash may happen. This patch checks the fields v2_ext_offset/eid_cnt/ism_gid_cnt before using them.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 8c3dca341aea885249e08856c4380300b75d2cf5 | affected | git | 9cc0170ae646876aa5de2f0cad3066ce53e86f27 | Unavailable | None listed |
| 8c3dca341aea885249e08856c4380300b75d2cf5 | affected | git | 49798283fce4c1a24fb1ba4c7c39127739535571 | Unavailable | None listed |
| 8c3dca341aea885249e08856c4380300b75d2cf5 | affected | git | 690b9a8db9460d065785548e43fd6a02d247c1b7 | Unavailable | None listed |
| 8c3dca341aea885249e08856c4380300b75d2cf5 | affected | git | 295a92e3df32e72aff0f4bc25c310e349d07ffbf | Unavailable | None listed |
| 8c3dca341aea885249e08856c4380300b75d2cf5 | affected | git | 42f6beb2d5779429417b5f8115a4e3fa695d2a6c | Unavailable | None listed |
| 8c3dca341aea885249e08856c4380300b75d2cf5 | affected | git | 7863c9f3d24ba49dbead7e03dfbe40deb5888fdf | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.10 | Unavailable | None listed |
| 5.10.271 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.222 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.189 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.68 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.7 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.13 | unaffected | original_commit_for_fix | Unavailable | * | None listed |