What’s Vulnerable › Vulnerabilities

CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-30 · updated 2026-08-04
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smc_ib_find_route() In smc_ib_find_route(), the neighbour found by neigh_lookup() and rtable resolved by ip_route_output_flow() are not released or put before return. It may cause the refcount leak, so fix it.

Affected products

• Linux kernel: from 5.16 before 6.1.91; from 6.2 before 6.6.31; from 6.7 before 6.8.10; 6.9-rc1, 6.9-rc2, 6.9-rc3, 6.9-rc4, 6.9-rc5, 6.9-rc6 (+1) — fixed in 6.1.91, 6.6.31, 6.8.10

How to fix

Upgrade to a fixed version: Linux kernel 6.1.91, 6.6.31, 6.8.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2ddc0dd7fec86ee53b8928a5cca5fbddd4fc7c06
• https://git.kernel.org/stable/c/5df93c029a907b0ff5a4eeadd77ba06ff0a277d2
• https://git.kernel.org/stable/c/d5a466ab6e78d6f2e0f64435f1e17246c8e941ff
• https://git.kernel.org/stable/c/da91e447d06dc649fcf46e59122e7bf8f0b2e0db
• https://git.kernel.org/stable/c/2ddc0dd7fec86ee53b8928a5cca5fbddd4fc7c06
• https://git.kernel.org/stable/c/5df93c029a907b0ff5a4eeadd77ba06ff0a277d2
• https://git.kernel.org/stable/c/d5a466ab6e78d6f2e0f64435f1e17246c8e941ff
• https://git.kernel.org/stable/c/da91e447d06dc649fcf46e59122e7bf8f0b2e0db
• https://security.netapp.com/advisory/ntap-20250404-0006/

Get alerted when CVE-2024-36945 or the next vulnerability affects your stack