Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-debugUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-abi-whitelists | Dec 1, 2016 | Mar 16, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 10, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 16, 2015 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Mar 16, 2015 |
| Ubuntu | — | Upgrade linux-image-3.16.0-33-powerpc-e500mcUpgrade linux-image-3.13.0-49-powerpc-e500mcUpgrade linux-image-3.16.0-33-powerpc-smpUpgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.2.0-79-powerpc-smpUpgrade linux-image-3.13.0-49-powerpc-smpUpgrade linux-image-3.16.0-33-powerpc64-embUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.13.0-49-powerpc64-smpUpgrade linux-image-3.13.0-49-genericUpgrade linux-image-3.13.0-49-powerpc-e500Upgrade linux-image-3.13.0-49-generic-lpaeUpgrade linux-image-3.16.0-33-generic-lpaeUpgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.13.0-49-lowlatencyUpgrade linux-image-3.16.0-33-genericUpgrade linux-image-3.13.0-49-powerpc64-embUpgrade linux-image-3.16.0-33-lowlatencyUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.16.0-33-powerpc64-smpUpgrade linux-image-3.2.0-1461-omap4 | Nov 8, 2024 | Mar 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub