CVE-2026-72447 sctp: hold socket lock when dumping endpoints in sctp_diag

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "include/net/sctp/sctp.h",
      "net/sctp/diag.c",
      "net/sctp/socket.c"
    ],
    "versions": [
      {
        "version": "8f840e47f190cbe61a96945c13e9551048d42cef",
        "lessThan": "f98c294a9369b6fe89e652c06357ee594be4dfa2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8f840e47f190cbe61a96945c13e9551048d42cef",
        "lessThan": "8b38e3dcfde3077dbc03eb8ef88e03cc19f70b8a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8f840e47f190cbe61a96945c13e9551048d42cef",
        "lessThan": "ec3c2d59a192e17e1014ba71afc368ba162ecac3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8f840e47f190cbe61a96945c13e9551048d42cef",
        "lessThan": "722576aba0a6d9423714550b1c03239b0f0def77",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8f840e47f190cbe61a96945c13e9551048d42cef",
        "lessThan": "abe7f8828e6ac8be858870c2bf836258844f97d5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8f840e47f190cbe61a96945c13e9551048d42cef",
        "lessThan": "207bb4ce8fe7de961ae7bb33569ad2cd61f44954",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8f840e47f190cbe61a96945c13e9551048d42cef",
        "lessThan": "f09a245f33e567b604efa1960b7a2d25dd9c8713",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8f840e47f190cbe61a96945c13e9551048d42cef",
        "lessThan": "7d8297e26b4e20b5d1c3c3fe51fe81a1c7fbc823",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "include/net/sctp/sctp.h",
      "net/sctp/diag.c",
      "net/sctp/socket.c"
    ],
    "versions": [
      {
        "version": "4.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.7",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.261",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.212",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.178",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.145",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.97",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.40",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.5",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]