In the Linux kernel, the following vulnerability has been resolved:
net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
When receiving proposal msg in server, the fields v2_ext_offset/ eid_cnt/ism_gid_cnt in proposal msg are from the remote client and can not be fully trusted. Especially the field v2_ext_offset, once exceed the max value, there has the chance to access wrong address, and crash may happen.
This patch checks the fields v2_ext_offset/eid_cnt/ism_gid_cnt before using them.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-awsUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-gcp | Mar 28, 2025 | Jan 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub