A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade perfUpgrade kernelUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debug-modules-extra | May 13, 2022 | Mar 25, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 25, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Apr 20, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Apr 19, 2022 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Oct 14, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfo | Mar 5, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-vanillaUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade dtb-broadcomUpgrade kernel-vanilla-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-preemptUpgrade kernel-azure-baseUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-default-manUpgrade dtb-amlogicUpgrade kselftests-kmp-preemptUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade cluster-md-kmp-preemptUpgrade kernel-vanilla-baseUpgrade kernel-64kb-extraUpgrade kernel-preempt-livepatch-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-preempt-develUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-preempt-optionalUpgrade kernel-defaultUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-default-baseUpgrade dtb-amdUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-debugUpgrade gfs2-kmp-preemptUpgrade kernel-vanilla-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-default-livepatch-develUpgrade dtb-zteUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-al | Feb 11, 2022 | Jan 28, 2022 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-riscv-5.11Upgrade linux-gcp-5.11Upgrade linux-snapdragonUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-oem-5.10Upgrade linux-dell300xUpgrade linux-azure-fdeUpgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-gkeopUpgrade linux-hwe-5.11Upgrade linux-hwe-5.13Upgrade linux-raspiUpgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-oem-5.14Upgrade linux-hwe-5.4Upgrade linux-azure-5.11Upgrade linux-aws-5.11Upgrade linux-raspi2Upgrade linux-oracle-5.11Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-gkeUpgrade linux-oem-5.13Upgrade linux-oracle-5.4Upgrade linux-gke-5.4Upgrade linux-gcp-5.4Upgrade linuxUpgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-gkeop-5.4Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-riscv | Nov 19, 2024 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub