CVE-2024-50034

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC

Eric report a panic on IPPROTO_SMC, and give the facts

that when INET_PROTOSW_ICSK was set, icsk->icsk_sync_mss must be set too.

Bug: Unable to handle kernel NULL pointer dereference at virtual address

0000000000000000

Mem abort info:

ESR = 0x0000000086000005

EC = 0x21: IABT (current EL), IL = 32 bits

SET = 0, FnV = 0

EA = 0, S1PTW = 0

FSC = 0x05: level 1 translation fault

user pgtable: 4k pages, 48-bit VAs, pgdp=00000001195d1000

[0000000000000000] pgd=0800000109c46003, p4d=0800000109c46003,

pud=0000000000000000

Internal error: Oops: 0000000086000005 [#1] PREEMPT SMP

Modules linked in:

CPU: 1 UID: 0 PID: 8037 Comm: syz.3.265 Not tainted

6.11.0-rc7-syzkaller-g5f5673607153 #0

Hardware name: Google Google Compute Engine/Google Compute Engine,

BIOS Google 08/06/2024

pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)

pc : 0x0

lr : cipso_v4_sock_setattr+0x2a

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References