In the Linux kernel, the following vulnerability has been resolved:
net/smc: check smcd_v2_ext_offset when receiving proposal msg
When receiving proposal msg in server, the field smcd_v2_ext_offset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcd_v2_ext_offset exceed the max value, there has the chance to access wrong address, and crash may happen.
This patch checks the value of smcd_v2_ext_offset before using it.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-intelUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-awsUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-oem-20.04d | Mar 28, 2025 | Jan 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Jan 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub