In the Linux kernel, the following vulnerability has been resolved:
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever reason.
Otherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)->reuse is already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)->bind_hash will be dereferenced as sk_state is LISTENING, which causes a crash as bind_hash is NULL.
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617 Call Trace: <TASK> __sys_listen_socket net/socket.c:1883 [inline] __sys_listen+0x1b7/0x230 net/socket.c:1894 __do_sys_listen net/socket.c:1902 [inline]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.10.227-219.884Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade perfUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-4.15.0-237-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-4.15.0-1180-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-realtimeUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-4.15.0-1142-oracleUpgrade linux-image-4.15.0-2081-gcp-fipsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-4.4.0-1143-awsUpgrade linux-image-4.4.0-268-genericUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-2097-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-4.4.0-268-lowlatencyUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-fipsUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-4.15.0-1163-kvmUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1135-fipsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1188-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-4.4.0-1144-kvmUpgrade linux-image-4.15.0-237-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-4.15.0-2118-aws-fipsUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-4.15.0-1173-gcpUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-4.4.0-1181-awsUpgrade linux-image-4.4.0-1113-fipsUpgrade linux-image-intelUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1086-ibm | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub