In the Linux kernel, the following vulnerability has been resolved:
net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
When receiving proposal msg in server, the field iparea_offset and the field ipv6_prefixes_cnt in proposal msg are from the remote client and can not be fully trusted. Especially the field iparea_offset, once exceed the max value, there has the chance to access wrong address, and crash may happen.
This patch checks iparea_offset and ipv6_prefixes_cnt before using them.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 21, 2025 | Jan 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1080-aws-fips | Mar 28, 2025 | Jan 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Jan 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub