Threats tagged 'ghsa-xjw7-4j5c-v8ww'

CVE-2024-49571 is a medium severity vulnerability in the Linux kernel's net/smc component. It involves improper validation of the iparea_offset and ipv6_prefixes_cnt fields in proposal messages received from remote clients. If iparea_offset exceeds its maximum expected value, it can lead to accessing invalid memory addresses and cause a system crash. The vulnerability has been addressed by adding checks on these fields before use.