SECUFOCUSNOW
Home›CVE index›CVE-2024-56640
Review reviewHigh

CVE-2024-56640

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-after-free issue, which manifested as the LGR/link refcnt reaching 0 early and entering the clear process, making resource access unsafe. refcount_t: addition on 0; use-after-free. WARNING: CPU: 14 PID: 107447 at lib/refcount.c:25 refcount_warn_saturate+0x9c/0x140 Workqueue: events smc_lgr_terminate_work [smc] Call trace: refcount_warn_saturate+0x9c/0x140 __smc_lgr_terminate.part.45+0x2a8/0x370 [smc] smc_lgr_terminate_work+0x28/0x30 [smc] process_o...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.12.28
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-after-free issue, which manifested as the LGR/link refcnt reaching 0 early and entering the clear process, making resource access unsafe. refcount_t: addition on 0; use-after-free. WARNING: CPU: 14 PID: 107447 at lib/refcount.c:25 refcount_warn_saturate+0x9c/0x140 Workqueue: events smc_lgr_terminate_work [smc] Call trace: refcount_warn_saturate+0x9c/0x140 __smc_lgr_terminate.part.45+0x2a8/0x370 [smc] smc_lgr_terminate_work+0x28/0x30 [smc] process_o...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 3b2dec2603d5b06ad3af71c1164ca0b92df3d2a8 < f502a88fdd415647a1f2dc45fac71b9c522a052b, >= 3b2dec2603d5b06ad3af71c1164ca0b92df3d2a8 < 0cf598548a6c36d90681d53c6b77d52363f2f295, >= 3b2dec2603d5b06ad3af71c1164ca0b92df3d2a8 < 673d606683ac70bc074ca6676b938bff18635226, >= 3b2dec2603d5b06ad3af71c1164ca0b92df3d2a8 < 6f0ae06a234a78ae137064f2c89135ac078a00eb, >= 3b2dec2603d5b06ad3af71c1164ca0b92df3d2a8 < 2c7f14ed9c19ec0f149479d1c2842ec1f9bf76d7, >= 4.18, >= 4.18 < 5.15.174, >= 5.16 < 6.1.120, >= 6.2 < 6.6.66, >= 6.7 < 6.12.5, 6.13
Fixed versions
5.15.174, 6.1.120, 6.6.66, 6.12.5

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416