In the Linux kernel, the following vulnerability has been resolved:
sctp: properly validate chunk size in sctp_sf_ootb()
A size validation fix similar to that in Commit 50619dbf8db7 ("sctp: add size validation when walking chunks") is also required in sctp_sf_ootb() to address a crash reported by syzbot:
BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166 sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407 sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88 sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243 sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159 ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernelUpgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade bpftool | Mar 14, 2025 | Nov 19, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpf | Mar 27, 2025 | Nov 19, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 18, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Mar 18, 2025 | Nov 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 10, 2025 | Nov 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Nov 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-4.4.0-1187-awsUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1078-awsUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-4.15.0-1186-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-4.4.0-1119-fipsUpgrade linux-image-aws-fips-4.15Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-4.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1168-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-gcp-4.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-243-genericUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-generic-lts-saucyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-serverUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-4.15.0-2124-aws-fipsUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-oracle-4.15Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-1141-fipsUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-3.13.0-211-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-aws-4.15Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-4.4.0-1150-kvmUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-3.13.0-211-genericUpgrade linux-image-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-4.15.0-243-lowlatencyUpgrade linux-image-4.15.0-2087-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lts-raringUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-genericUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-4.4.0-1149-awsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-4.4.0-274-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lts-trustyUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-4.15.0-1179-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-generic-lts-quantalUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.4.0-274-genericUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1194-azureUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1027-azure-fde | Feb 20, 2025 | Nov 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub