01 Record

CVE-2024-57791

net/smc: check return value of sock_recvmsg when draining clc data

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

net/smc: check return value of sock_recvmsg when draining clc data

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.77% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 52.8% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-08-04.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-01-11 12:35Z1 YR AGO

Last updated

2026-08-05 11:46Z29 DAYS AGO

Reserved

2025-01-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-671Lack of Administrator Control over SecurityClass

Data version

5.2

Document digest

e65ce54ff2263ddc37fb06612ae1d4568cc26195790ae237071d3b645aa7f3ca

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxfb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < 82c7ad9ca09975aae737abffd66d1ad98874c13d, fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < 6b80924af6216277892d5f091f5bfc7d1265fa28, fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < d7d1f986ebb284b1db8dafca7d1bdb6dd2445cf6, fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < 7a6927814b4256d603e202ae7c5e38db3b338896, fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < df3dfe1a93c6298d8c09a18e4fba19ef5b17763b, fb4f79264c0fc6fd5a68ffe3e31bfff97311e1f1 to < c5b8ee5022a19464783058dc6042e8eefa34e8cd, 5.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/82c7ad9ca09975aae737abffd66d1ad98874c13d
git.kernel.orghttps://git.kernel.org/stable/c/6b80924af6216277892d5f091f5bfc7d1265fa28
git.kernel.orghttps://git.kernel.org/stable/c/d7d1f986ebb284b1db8dafca7d1bdb6dd2445cf6
git.kernel.orghttps://git.kernel.org/stable/c/7a6927814b4256d603e202ae7c5e38db3b338896
git.kernel.orghttps://git.kernel.org/stable/c/df3dfe1a93c6298d8c09a18e4fba19ef5b17763b
git.kernel.orghttps://git.kernel.org/stable/c/c5b8ee5022a19464783058dc6042e8eefa34e8cd
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2024-57791

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-57791

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References