In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is p…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, set once in sctp_rcv()). For an ASCONF located through its Address Parameter by __sctp_rcv_asconf_lookup(), that cached transport corresponds to the Address Parameter, which need not be the packet's source address. sctp_process_asconf_para…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/74e8f3e7114f0e26d1b2c4c048044db9fcc27603
- https://git.kernel.org/stable/c/85aca407c560aba81b5ce9d3d6cf94c74077d19b
- https://git.kernel.org/stable/c/9b2854f86f0b56e9027d68e7a3fc909d1a9b566f
- https://git.kernel.org/stable/c/d136b29bf91dd8e3161281b87de597b7311d9462
- https://git.kernel.org/stable/c/fedeb4468987bcaff85fe3061de5ae052d414740
Timeline
- nvd_ingest NVD