PT-2024-33874
CVE-2024-50034
·
تاريخ النشر
2024-10-10
·
تاريخ التحديث
2026-10-13
الوصف من
CVSS 4.0
6.8
متوسطةالمقاييسAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.11.0-rc7-syzkaller-g5f5673607153
Description:
The issue is related to a panic on IPPROTO SMC in the Linux kernel. When INET PROTOSW ICSK is set, icsk->icsk sync mss must also be set. The problem occurs due to a lack of synchronization of MSS within sys connect file for AF SMC. This can lead to a kernel NULL pointer dereference. A patch has been added to prevent such panic by performing a simple return, laying the groundwork for future support of this feature for IPPROTO SMC.
Recommendations:
For Linux kernel versions prior to 6.11.0-rc7-syzkaller-g5f5673607153, consider applying the patch that adds a toy implementation to prevent the panic. This patch performs a simple return to prevent the kernel NULL pointer dereference, providing a temporary solution until full support for synchronizing MSS within sys connect file for AF SMC is implemented.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾