In the Linux kernel, the following vulnerability has been resolved:
sctp: properly validate chunk size in sctp_sf_ootb()
A size validation fix similar to that in Commit 50619dbf8db7 ("sctp: add size validation when walking chunks") is also required in sctp_sf_ootb() to address a crash reported by syzbot:
BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166 sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407 sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88 sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243 sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159 ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.230-223.885Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Mar 14, 2025 | Nov 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-tools-develUpgrade kernel-headers | Mar 27, 2025 | Nov 19, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Mar 18, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 11, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Feb 11, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Mar 18, 2025 | Nov 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 10, 2025 | Nov 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Nov 19, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-4.15Upgrade linux-image-4.15.0-1186-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-realtimeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-4.15.0-1141-fipsUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-bluefieldUpgrade linux-image-aws-fips-4.15Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-serverUpgrade linux-image-gcp-4.15Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-intelUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-4.4.0-1119-fipsUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1168-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-4.4.0-1187-awsUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-oracle-4.15Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-lts-saucyUpgrade linux-image-fipsUpgrade linux-image-4.15.0-243-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-2124-aws-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-3.13.0-211-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-aws-4.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-4.15.0-1179-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-lts-raringUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-4.15.0-1194-azureUpgrade linux-image-4.4.0-1150-kvmUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-4.4.0-274-genericUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lts-quantalUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-134-genericUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-nvidiaUpgrade linux-image-4.4.0-274-lowlatencyUpgrade linux-image-3.13.0-211-genericUpgrade linux-image-4.15.0-2087-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1081-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-4.4.0-1149-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-4.15.0-243-lowlatencyUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-hwe-24.04 | Feb 20, 2025 | Nov 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub