In the Linux kernel, the following vulnerability has been resolved:
sctp: fix a potential overflow in sctp_ifwdtsn_skip
Currently, when traversing ifwdtsn skips with _sctp_walk_ifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be < sizeof(struct sctp_ifwdtsn_skip), and dereference it as struct sctp_ifwdtsn_skip may cause coverflow.
This patch fixes it by checking the pos against "the end of the chunk - sizeof(struct sctp_ifwdtsn_skip)" in sctp_ifwdtsn_skip, similar to sctp_fwdtsn_skip.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.108-65.141Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.178-162.673Upgrade perf-debuginfoUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf | Oct 16, 2025 | Sep 18, 2025 |
| Debian | — | Upgrade linux | Sep 22, 2025 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.4Upgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-oracle-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotgUpgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-gkeUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-intel-iot-realtimeUpgrade linux-fipsUpgrade linux-raspiUpgrade linux-iotUpgrade linux-azure-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidiaUpgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-aws-fipsUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-realtimeUpgrade linux-hwe-5.4Upgrade linux-xilinx-zynqmp | Sep 26, 2025 | Sep 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub