CVE-2024-50293

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc6-next-20241106-syzkaller

Description: A vulnerability has been resolved in the Linux kernel, specifically in the net/smc component, where a dangling sk pointer is left in the smc create() function. This issue was discovered by syzbot, thanks to a commit that prints a warning when the pf->create() function does not clear the sock->sk on failure. The vulnerability affects AF SMC with family: 43, type: 1, protocol: 0.

Recommendations: As a temporary workaround, consider disabling the smc create() function until a patch is available. Update to a version of the Linux kernel that includes the fix for this issue, which is available in versions after 6.12.0-rc6-next-20241106-syzkaller.