CVE - CVE-2024-47408

CVE-ID
CVE-2024-47408	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net/smc: check smcd_v2_ext_offset when receiving proposal msg When receiving proposal msg in server, the field smcd_v2_ext_offset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcd_v2_ext_offset exceed the max value, there has the chance to access wrong address, and crash may happen. This patch checks the value of smcd_v2_ext_offset before using it.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/48d5a8a304a643613dab376a278f29d3e22f7c34 URL:https://git.kernel.org/stable/c/48d5a8a304a643613dab376a278f29d3e22f7c34 MISC:https://git.kernel.org/stable/c/935caf324b445fe73d7708fae6f7176fb243f357 URL:https://git.kernel.org/stable/c/935caf324b445fe73d7708fae6f7176fb243f357 MISC:https://git.kernel.org/stable/c/9ab332deb671d8f7e66d82a2ff2b3f715bc3a4ad URL:https://git.kernel.org/stable/c/9ab332deb671d8f7e66d82a2ff2b3f715bc3a4ad MISC:https://git.kernel.org/stable/c/a36364d8d4fabb105001f992fb8ff2d3546203d6 URL:https://git.kernel.org/stable/c/a36364d8d4fabb105001f992fb8ff2d3546203d6 MISC:https://git.kernel.org/stable/c/e1cc8be2a785a8f1ce1f597f3e608602c5fccd46 URL:https://git.kernel.org/stable/c/e1cc8be2a785a8f1ce1f597f3e608602c5fccd46
Assigning CNA
kernel.org
Date Record Created
20250111	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250111)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)