CVE-2024-57791

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description A vulnerability in the Linux kernel has been identified where the field length in smc clc msg hdr indicates the length of a message to be received from the network. This value should not be fully trusted as it comes from the network. If the length exceeds the buflen value in the smc clc wait msg function, it may cause a deadloop when trying to drain the remaining data. The patch checks the return value of sock recvmsg when draining data to prevent this deadloop.

Recommendations For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider restricting network access to minimize the risk of exploitation until the update can be applied.