CVE-2024-49568

CVE-2024-49568 affects the Linux kernel net/smc implementation. The issue arises when receiving a proposal message: fields v2_ext_offset, eid_cnt, and ism_gid_cnt from the remote client are not fully trustworthy; if v2_ext_offset exceeds the max value, it can trigger an out-of-bounds access and a...

CVE-2024-49571 net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg

In the Linux kernel, the following vulnerability has been resolved: net/smc: check ipareaoffset and ipv6prefixescnt when receiving proposal msg When receiving proposal msg in server, the field ipareaoffset and the field ipv6prefixescnt in proposal msg are from the remote client and can not be ful...

CVE-2024-47408 net/smc: check smcd_v2_ext_offset when receiving proposal msg

In the Linux kernel, the following vulnerability has been resolved: net/smc: check smcdv2extoffset when receiving proposal msg When receiving proposal msg in server, the field smcdv2extoffset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcdv2extoffset...