In the Linux kernel, the following vulnerability has been resolved:
net/smc: avoid data corruption caused by decline
We found a data corruption issue during testing of SMC-R on Redis applications.
The benchmark has a low probability of reporting a strange error as shown below.
"Error: Protocol error, got "\xe2" as reply type byte"
Finally, we found that the retrieved error data was as follows:
0xE2 0xD4 0xC3 0xD9 0x04 0x00 0x2C 0x20 0xA6 0x56 0x00 0x16 0x3E 0x0C 0xCB 0x04 0x02 0x01 0x00 0x00 0x20 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0xE2
It is quite obvious that this is a SMC DECLINE message, which means that the applications received SMC protocol message. We found that this was caused by the following situations:
client server ¦ clc proposal -------------> ¦ clc accept <------------- ¦ clc confirm -------------> wait llc confirm send llc confirm ¦failed llc confirm ¦ x------ (after 2s)timeout wait llc confirm rsp
wait decline
(after 1s) timeout (after 2s) timeout ¦ decline --------------> ¦ decline <--------------
As a result, a decline message was sent in the implementation, and this message was read from TCP by the already-fallback connection.
This patch double the client timeout as 2x of the server value, With this simple change, the Decline messages should never cross or collide (during Confirm link timeout).
This issue requires an immediate solution, since the protocol updates involve a more long-term solution.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade perfUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extra | Aug 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-cross-headers | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-exynosUpgrade kernel-rt_debug | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-lowlatencyUpgrade linux-nvidia-tegra-igxUpgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-oracle-5.15Upgrade linux-oracleUpgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-azure-fdeUpgrade linux-aws-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-ibm-5.15Upgrade linux-kvmUpgrade linux-intel-iot-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-nvidia-tegraUpgrade linux-nvidiaUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-azureUpgrade linuxUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-nvidia-6.5Upgrade linux-nvidia-tegra-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub