CVE-2024-47408

In the Linux kernel, the following vulnerability has been resolved:

net/smc: check smcd_v2_ext_offset when receiving proposal msg

When receiving proposal msg in server, the field smcd_v2_ext_offset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcd_v2_ext_offset exceed the max value, there has the chance to access wrong address, and crash may happen.

This patch checks the value of smcd_v2_ext_offset before using it.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because triggering it requires communication over the Shared Memory Communications (SMC) protocol, limiting exposure to environments utilizing SMC-enabled networking or local access. An attacker sending a malformed proposal message with an out-of-bounds offset can induce an invalid memory access that causes a system crash. The impact is strictly confined to denial of service, with no compromise to system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.