In the Linux kernel, the following vulnerability has been resolved:
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever reason.
Otherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)->reuse is already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)->bind_hash will be dereferenced as sk_state is LISTENING, which causes a crash as bind_hash is NULL.
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617 Call Trace: <TASK> __sys_listen_socket net/socket.c:1883 [inline] __sys_listen+0x1b7/0x230 net/socket.c:1894 __do_sys_listen net/socket.c:1902 [inline]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perf-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.115-126.197Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perf-debuginfo | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-fipsUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-4.15.0-1180-awsUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-4.15.0-2081-gcp-fipsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-4.15.0-1142-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1140-awsUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1135-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-4.15.0-2097-azure-fipsUpgrade linux-image-4.4.0-268-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-237-lowlatencyUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1163-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-4.4.0-268-genericUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-4.4.0-1143-awsUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-4.15.0-2118-aws-fipsUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-4.15.0-1188-azureUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1144-kvmUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-4.15.0-237-genericUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-4.15.0-1173-gcpUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-4.4.0-1113-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-4.4.0-1181-awsUpgrade linux-image-intelUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-5.4.0-1086-ibm | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub