NULL pointer dereference in Linux kernel smc

1) NULL pointer dereference

EUVDB-ID: #VU104621

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49060

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the smc_pnet_find_ib() function in net/smc/smc_pnet.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 5.4 - 5.18 rc8

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.0:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.0:rc6:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.6:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.4.7:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/22025513ced3d599ee8b24169141c95cf2467a4a
https://git.kernel.org/stable/c/35b91e49bc80ca944a8679c3b139ddaf2f8eea0f
https://git.kernel.org/stable/c/3a523807f01455fe9a0c1a433f27cd4411ee400f
https://git.kernel.org/stable/c/a05f5e26cb8bb4d07e0595545fcad1bb406f0085
https://git.kernel.org/stable/c/d22f4f977236f97e01255a80bca2ea93a8094fc8
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.112
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.35
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.4
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.190

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.