PT-2024-36950
CVE-2024-56641
·
Published
2024-12-03
·
Updated
2026-10-18
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A warning was encountered in the Linux kernel where
close work was canceled before initialization, resulting in a warning. This issue occurs when smc close cancel work is triggered, such as when the RDMA driver is removed and the LGR is terminated, causing conn->close work to be flushed before initialization. The fix involves initializing close work before establishing the connection.Recommendations
For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider disabling the
smc close cancel work function until a patch is available. Restrict access to the smc module to minimize the risk of exploitation. Avoid using the close work variable in the affected API endpoints until the issue is resolved. Found an issue in the description? Have something to add? Feel free to write us 👾