In the Linux kernel, the following vulnerability has been resolved:
sctp: properly validate chunk size in sctp_sf_ootb()
A size validation fix similar to that in Commit 50619dbf8db7 ("sctp: add size validation when walking chunks") is also required in sctp_sf_ootb() to address a crash reported by syzbot:
BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166 sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407 sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88 sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243 sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159 ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.230-223.885Upgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-debuginfo-common-aarch64 | Mar 14, 2025 | Nov 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-livepatch-6.1.119-129.201Upgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade bpftool | Mar 27, 2025 | Nov 19, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Mar 18, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Feb 11, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Mar 18, 2025 | Nov 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 10, 2025 | Nov 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Nov 19, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-4.15.0-1141-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-azure-fips-4.15Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-4.15Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-4.4.0-1187-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-fips-4.15Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1078-awsUpgrade linux-image-4.15.0-1186-awsUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-4.15.0-2124-aws-fipsUpgrade linux-image-generic-lts-saucyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-133-genericUpgrade linux-image-4.15.0-243-genericUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.4.0-1119-fipsUpgrade linux-image-azure-4.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-4.15Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-4.15.0-1168-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-intelUpgrade linux-image-realtimeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-serverUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1194-azureUpgrade linux-image-aws-4.15Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-4.15.0-243-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-4.15.0-2087-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-generic-lts-quantalUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-274-genericUpgrade linux-image-azureUpgrade linux-image-4.4.0-1150-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-4.15.0-1179-gcpUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-3.13.0-211-lowlatencyUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-4.4.0-274-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-genericUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oemUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-4.4.0-1149-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-generic-lts-raringUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-3.13.0-211-genericUpgrade linux-image-azure-nvidia | Feb 20, 2025 | Nov 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub