CVE-2024-57791 net/smc: check return value of sock_recvmsg when draining clc data
A remote attacker can cause a denial of service in the Linux kernel SMC module by sending crafted messages that trigger an infinite loop during data draining.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-57791?
CVE-2024-57791 is a high-severity denial of service vulnerability in Linux kernel, published on 11 Jan 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net/smc: check return value of sock_recvmsg when draining clc data
When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen.
This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining.
Which versions are affected by CVE-2024-57791?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-57791?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-57791 being exploited?
There is no known exploitation of CVE-2024-57791 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-57791, DEBIAN-CVE-2024-57791, GHSA-g3r9-3xjg-2vvw, UBUNTU-CVE-2024-57791.