Linux Kernel SMC Protocol Deadlock Vulnerability via Improper Message Length Validation

A vulnerability in the Linux kernel's implementation of the SMC (Shared Memory Communication) protocol can lead to a deadlock condition. This issue arises because the length of messages received over the network can be manipulated, allowing values to exceed the buffer length expected by the kernel. When this happens, the kernel may enter a dead loop while trying to process the excess data, effectively causing a denial-of-service condition. The vulnerability has been addressed by adding a check on the return value of the message-receiving function, preventing the deadlock scenario.

Impact

Exploitation of this vulnerability can cause a deadlock situation, where the system gets stuck processing network data, leading to a denial-of-service condition.