In the Linux kernel, the following vulnerability has been resolved:
net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
Coverity reports a possible NULL dereferencing problem:
in smc_vlan_by_tcpsk(): 6. returned_null: netdev_lower_get_next returns NULL (checked 29 out of 30 times). 7. var_assigned: Assigning: ndev = NULL return value from netdev_lower_get_next. 1623 ndev = (struct net_device *)netdev_lower_get_next(ndev, &lower); CID 1468509 (#1 of 1): Dereference null return value (NULL_RETURNS) 8. dereference: Dereferencing a pointer that might be NULL ndev when calling is_vlan_dev. 1624 if (is_vlan_dev(ndev)) {
Remove the manual implementation and use netdev_walk_all_lower_dev() to iterate over the lower devices. While on it remove an obsolete function parameter comment.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-renesasUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-altera | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub