In the Linux kernel, the following vulnerability has been resolved:
sctp: properly validate chunk size in sctp_sf_ootb()
A size validation fix similar to that in Commit 50619dbf8db7 ("sctp: add size validation when walking chunks") is also required in sctp_sf_ootb() to address a crash reported by syzbot:
BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166 sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407 sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88 sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243 sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159 ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel | Mar 14, 2025 | Nov 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64 | Mar 27, 2025 | Nov 19, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 18, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Feb 11, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Nov 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Mar 18, 2025 | Nov 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 10, 2025 | Nov 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Nov 19, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-4.15.0-1179-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1194-azureUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-274-genericUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-4.4.0-1150-kvmUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-generic-lts-quantalUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-aws-4.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lts-raringUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-3.13.0-211-genericUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-4.15.0-2087-gcp-fipsUpgrade linux-image-4.15.0-243-lowlatencyUpgrade linux-image-4.4.0-1149-awsUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-3.13.0-211-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-gkeopUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-generic-lts-trustyUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-274-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-oracle-4.15Upgrade linux-image-4.15.0-1168-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intelUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-4.15.0-1141-fipsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-4.4.0-1119-fipsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-fips-4.15Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-4.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-serverUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-4.15.0-1186-awsUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-aws-fips-4.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-lts-saucyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-1187-awsUpgrade linux-image-4.15.0-243-genericUpgrade linux-image-4.15.0-2124-aws-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-azure-4.15 | Feb 20, 2025 | Nov 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub