In the Linux kernel, the following vulnerability has been resolved:
sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
With this refcnt added in sctp_stream_priorities, we don't need to traverse all streams to check if the prio is used by other streams when freeing one stream's prio in sctp_sched_prio_free_sid(). This can avoid a nested loop (up to 65535 * 65535), which may cause a stuck as Ying reported:
watchdog: BUG: soft lockup - CPU#23 stuck for 26s! [ksoftirqd/23:136] Call Trace: <TASK> sctp_sched_prio_free_sid+0xab/0x100 [sctp] sctp_stream_free_ext+0x64/0xa0 [sctp] sctp_stream_free+0x31/0x50 [sctp] sctp_association_free+0xa5/0x200 [sctp]
Note that it doesn't need to use refcount_t type for this counter, as its accessing is always protected under the sock lock.
v1->v2: - add a check in sctp_sched_prio_set to avoid the possible prio_head refcnt overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64 | Oct 24, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Feb 3, 2026 | Feb 2, 2026 |
| Ubuntu | — | Upgrade linux-nvidia-tegraUpgrade linux-hwe-5.15Upgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-azureUpgrade linux-iotUpgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15Upgrade linux-aws-5.15Upgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.4Upgrade linux-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-ibm-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.15Upgrade linux-aws-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linuxUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-ibm | Oct 10, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub