A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extra | May 13, 2022 | Mar 25, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 25, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 20, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Apr 19, 2022 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Oct 14, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfo | Mar 5, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade dlm-kmp-preemptUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-vanillaUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-azure-baseUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-macrosUpgrade dtb-allwinnerUpgrade dtb-alUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-develUpgrade dtb-zteUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-debugUpgrade gfs2-kmp-preemptUpgrade cluster-md-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-preempt-livepatch-develUpgrade dtb-sprdUpgrade kernel-preempt-extraUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-default-develUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-preempt-optionalUpgrade kernel-debug-develUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-devel | Feb 11, 2022 | Jan 28, 2022 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-snapdragonUpgrade linux-raspiUpgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-oracleUpgrade linux-riscv-5.11Upgrade linux-azure-5.11Upgrade linux-hwe-5.13Upgrade linux-gcp-4.15Upgrade linux-azure-fdeUpgrade linux-azureUpgrade linux-dell300xUpgrade linux-hwe-5.11Upgrade linux-gcp-5.11Upgrade linux-kvmUpgrade linux-oem-5.14Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-oem-5.10Upgrade linux-aws-5.11Upgrade linux-oracle-5.4Upgrade linux-riscvUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-fipsUpgrade linux-gkeUpgrade linux-awsUpgrade linux-gcpUpgrade linux-raspi2Upgrade linux-aws-5.4Upgrade linux-gkeop-5.4Upgrade linux-oem-5.13Upgrade linux-gke-5.4Upgrade linux-aws-hweUpgrade linux-raspi-5.4Upgrade linux-azure-fipsUpgrade linux-oracle-5.11 | Nov 19, 2024 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub