CVE-2024-56718
A critical bug in the Linux kernel’s SMC link handling can cause a crash when a link goes down after the associated object is freed. The issue can lead to a kernel panic, potentially allowing an attacker to disrupt system availability. It has been fixed in recent kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel, especially version 6.13 and earlier, used on systems such as Alibaba Cloud ECS.
Real-world impact
An attacker could trigger a kernel crash, causing a denial‑of‑service on the affected system.
Why this severity
The CVSS score of 9.8 reflects the high impact of a local or remote attacker being able to cause a complete system crash with no authentication or user interaction required.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the fix, such as 6.13 or newer.
NVD description indicates the issue has been resolved.
Timeline
- Dec 29, 2024 · Dec 29, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.