Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-debugUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs | Dec 1, 2016 | Mar 16, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 10, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 16, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Mar 16, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-49-powerpc-e500mcUpgrade linux-image-3.2.0-79-powerpc-smpUpgrade linux-image-3.16.0-33-powerpc-e500mcUpgrade linux-image-3.13.0-49-powerpc64-smpUpgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.13.0-49-genericUpgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.16.0-33-powerpc64-embUpgrade linux-image-3.16.0-33-powerpc-smpUpgrade linux-image-3.13.0-49-powerpc-smpUpgrade linux-image-3.16.0-33-genericUpgrade linux-image-3.13.0-49-powerpc64-embUpgrade linux-image-3.16.0-33-powerpc64-smpUpgrade linux-image-3.16.0-33-lowlatencyUpgrade linux-image-3.2.0-1461-omap4Upgrade linux-image-3.13.0-49-powerpc-e500Upgrade linux-image-3.16.0-33-generic-lpaeUpgrade linux-image-3.13.0-49-lowlatencyUpgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.13.0-49-generic-lpaeUpgrade linux-image-3.2.0-79-powerpc64-smp | Nov 8, 2024 | Mar 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub