A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade perfUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debug-core | May 13, 2022 | Mar 25, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 25, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Apr 20, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Apr 19, 2022 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Oct 14, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-cross-headers | Mar 5, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade gfs2-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-vanilla-develUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade kernel-preempt-optionalUpgrade kernel-debugUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade dtb-zteUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-baseUpgrade kernel-preempt-livepatch-develUpgrade dtb-amdUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-debug-baseUpgrade kernel-default-manUpgrade kernel-docs-htmlUpgrade kernel-vanillaUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kselftests-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-macros | Feb 11, 2022 | Jan 28, 2022 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-oem-5.13Upgrade linux-raspi2Upgrade linux-gkeop-5.4Upgrade linuxUpgrade linux-oracle-5.11Upgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-gkeUpgrade linux-riscvUpgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-gke-5.4Upgrade linux-dell300xUpgrade linux-raspiUpgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-hwe-5.13Upgrade linux-snapdragonUpgrade linux-azureUpgrade linux-hweUpgrade linux-aws-5.11Upgrade linux-hwe-5.4Upgrade linux-azure-5.11Upgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-gcp-5.11Upgrade linux-riscv-5.11Upgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-hwe-5.11Upgrade linux-gkeopUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-azure-fdeUpgrade linux-oem-5.14Upgrade linux-oem-5.10 | Nov 19, 2024 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub