Linux Kernel v2_ext_offset Vulnerability in net/smc Component Allows Memory Access Errors

A vulnerability has been identified in the Linux kernel's net/smc component, where the server improperly trusts certain fields in proposal messages received from remote clients. Specifically, the v2_ext_offset, eid_cnt, and ism_gid_cnt fields can be manipulated, potentially leading to access violations and crashes. The issue arises because the v2_ext_offset field, if exceeding a maximum value, can cause the kernel to read from incorrect memory addresses. This vulnerability has been addressed by implementing checks on these fields before they are processed.

Impact

Exploitation of this vulnerability could lead to memory access errors, causing system crashes.