PT-2024-36950 · Linux+4 · Linux Kernel+4
Published
2024-12-03
·
Updated
2026-05-26
·
CVE-2024-56641
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A warning was encountered in the Linux kernel where
close work was canceled before initialization, resulting in a warning. This issue occurs when smc close cancel work is triggered, such as when the RDMA driver is removed and the LGR is terminated, causing conn->close work to be flushed before initialization. The fix involves initializing close work before establishing the connection.Recommendations
For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider disabling the
smc close cancel work function until a patch is available. Restrict access to the smc module to minimize the risk of exploitation. Avoid using the close work variable in the affected API endpoints until the issue is resolved.Exploit
Fix
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu