In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free …
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump(): BUG: KASAN: use-after-free in __lock_acquire+0x36d9/0x4c20 Call Trace: __lock_acquire+0x36d9/0x4c20 kernel/locking/lockdep.c:3218 lock_acquire+0x1ed/0x520 kernel/locking/lockdep.c:3844 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _r…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/5ec7d18d1813a5bead0b495045606c93873aecbb Patch
- https://git.kernel.org/stable/c/75799e71df1da11394740b43ae5686646179561d Patch
- https://git.kernel.org/stable/c/769d14abd35e0e153b5149c3e1e989a9d719e3ff Patch
- https://git.kernel.org/stable/c/831de271452b87657fcf8d715ee20519b79caef5 Patch
- https://git.kernel.org/stable/c/8873140f95d4977bf37e4cf0d5c5e3f6e34cdd3e Patch
- https://git.kernel.org/stable/c/af6e6e58f7ebf86b4e7201694b1e4f3a62cbc3ec Patch
- https://git.kernel.org/stable/c/5ec7d18d1813a5bead0b495045606c93873aecbb Patch
- https://git.kernel.org/stable/c/75799e71df1da11394740b43ae5686646179561d Patch
- https://git.kernel.org/stable/c/769d14abd35e0e153b5149c3e1e989a9d719e3ff Patch
- https://git.kernel.org/stable/c/831de271452b87657fcf8d715ee20519b79caef5 Patch
- https://git.kernel.org/stable/c/8873140f95d4977bf37e4cf0d5c5e3f6e34cdd3e Patch
- https://git.kernel.org/stable/c/af6e6e58f7ebf86b4e7201694b1e4f3a62cbc3ec Patch
Timeline
- nvd_ingest NVD