Linux Kernel Vulnerability in SMC Port Management by Alibaba Cloud

CVE-2023-54318

What is CVE-2023-54318?

A vulnerability in the Linux kernel's SMC (Shared Memory Communications) protocol could lead to a kernel crash during the execution of smcr_port_add. The issue arises from concurrent modifications to the smc_lgr_list.list while an execution is attempting to iterate through it. This oversight allows for a NULL pointer dereference, potentially resulting in unexpected system failures or instability. To mitigate this risk, the implementation has been updated to utilize smc_lgr_list.lock to safeguard the list iteration process, thereby preventing race conditions and ensuring system reliability.

References