In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix wrong list_del in smc_lgr_cleanup_early
smc_lgr_cleanup_early() meant to delete the link group from the link group list, but it deleted the list head by mistake.
This may cause memory corruption since we didn't remove the real link group from the list and later memseted the link group structure. We got a list corruption panic when testing:
[ 231.277259] list_del corruption. prev->next should be ffff8881398a8000, but was 0000000000000000 [ 231.278222] ------------[ cut here ]------------ [ 231.278726] kernel BUG at lib/list_debug.c:53! [ 231.279326] invalid opcode: 0000 [#1] SMP NOPTI [ 231.279803] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.46+ #435 [ 231.280466] Hardware name: Alibaba Cloud ECS, BIOS 8c24b4c 04/01/2014 [ 231.281248] Workqueue: events smc_link_down_work [ 231.281732] RIP: 0010:__list_del_entry_valid+0x70/0x90 [ 231.282258] Code: 4c 60 82 e8 7d cc 6a 00 0f 0b 48 89 fe 48 c7 c7 88 4c 60 82 e8 6c cc 6a 00 0f 0b 48 89 fe 48 c7 c7 c0 4c 60 82 e8 5b cc 6a 00 <0f> 0b 48 89 fe 48 c7 c7 00 4d 60 82 e8 4a cc 6a 00 0f 0b cc cc cc [ 231.284146] RSP: 0018:ffffc90000033d58 EFLAGS: 00010292 [ 231.284685] RAX: 0000000000000054 RBX: ffff8881398a8000 RCX: 0000000000000000 [ 231.285415] RDX: 0000000000000001 RSI: ffff88813bc18040 RDI: ffff88813bc18040 [ 231.286141] RBP: ffffffff8305ad40 R08: 0000000000000003 R09: 0000000000000001 [ 231.286873] R10: ffffffff82803da0 R11: ffffc90000033b90 R12: 0000000000000001 [ 231.287606] R13: 0000000000000000 R14: ffff8881398a8000 R15: 0000000000000003 [ 231.288337] FS: 0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 231.289160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.289754] CR2: 0000000000e72058 CR3: 000000010fa96006 CR4: 00000000003706f0 [ 231.290485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.291211] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.291940] Call Trace: [ 231.292211] smc_lgr_terminate_sched+0x53/0xa0 [ 231.292677] smc_switch_conns+0x75/0x6b0 [ 231.293085] ? update_load_avg+0x1a6/0x590 [ 231.293517] ? ttwu_do_wakeup+0x17/0x150 [ 231.293907] ? update_load_avg+0x1a6/0x590 [ 231.294317] ? newidle_balance+0xca/0x3d0 [ 231.294716] smcr_link_down+0x50/0x1a0 [ 231.295090] ? __wake_up_common_lock+0x77/0x90 [ 231.295534] smc_link_down_work+0x46/0x60 [ 231.295933] process_one_work+0x18b/0x350
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade dtb-sprdUpgrade kernel-macrosUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-preemptUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kb | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub