AZL-70079 CVE-2025-40187 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

CVE-2025-40187

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

CVE-2025-40187

CVE-2025-40187 affects the Linux kernel SCTP implementation. The issue is a possible NULL pointer dereference in net/sctp during disposition handling (sctp_disposition; sctp_sf_do_5_1D_ce) when new_asoc->peer.adaptation_ind==0 and sctp_ulpevent_make_authkey==0, and sctp_ulpevent_make_authkey()...