Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-57791

net/smc: check return value of sock_recvmsg when draining clc data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < 82c7ad9ca09975aae737abffd66d1ad98874c13daffected
  • fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < 6b80924af6216277892d5f091f5bfc7d1265fa28affected
  • fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < d7d1f986ebb284b1db8dafca7d1bdb6dd2445cf6affected
  • fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < 7a6927814b4256d603e202ae7c5e38db3b338896affected
  • fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < df3dfe1a93c6298d8c09a18e4fba19ef5b17763baffected
  • fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < c5b8ee5022a19464783058dc6042e8eefa34e8cdaffected

Linux Linux

Default version status: affected

  • 5.8affected
  • 0 to < 5.8unaffected
  • 5.10.233 to ≤ 5.10.*unaffected
  • 5.15.176 to ≤ 5.15.*unaffected
  • 6.1.122 to ≤ 6.1.*unaffected
  • 6.6.68 to ≤ 6.6.*unaffected
  • 6.12.7 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References