CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
In the Linux kernel, the following vulnerability has been resolved:
net/smc: check ipareaoffset and ipv6prefixescnt when receiving proposal msg
When receiving proposal msg in server, the field ipareaoffset and the field ipv6prefixescnt in proposal msg are from the remote client and can not be fully trusted. Especially the field ipareaoffset, once exceed the max value, there has the chance to access wrong address, and crash may happen.
This patch checks ipareaoffset and ipv6prefixescnt before using them.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
Apply the kernel fix so that net/smc checks iparea_offset and ipv6_prefixes_cnt when receiving proposal messages, preventing use of untrusted values from remote clients.
Linux kernel (net/smc) Receive/handle SMC proposal messages = validate iparea_offset and ipv6_prefixes_cnt before use - Compensating control
Mitigate by restricting access to any Linux SMC (net/smc) server endpoint that receives proposal messages from untrusted remote clients until the kernel fix is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49571?
CVE-2024-49571 has been classified with a severity rating that reflects a potential security impact on the Linux kernel.
How do I fix CVE-2024-49571?
To address CVE-2024-49571, users should update their Linux kernel to the latest version where the vulnerability has been patched.
What type of vulnerability is CVE-2024-49571?
CVE-2024-49571 is a vulnerability in the Linux kernel related to improper handling of proposal messages during network communications.
Which versions of the Linux kernel are affected by CVE-2024-49571?
CVE-2024-49571 affects specific versions of the Linux kernel that include the vulnerable implementation prior to the fix being applied.
What is the impact of CVE-2024-49571?
The impact of CVE-2024-49571 can potentially allow for unauthorized access or manipulation of networking functions in the affected systems.