CVE-2021-46929

In the Linux kernel, the following vulnerability has been resolved: sctp: use callrcu to free endpoint This patch is to delay the endpoint free by calling callrcu to fix another use-after-free issue in sctpsockdump: BUG: KASAN: use-after-free in lockacquire+0x36d9/0x4c20 Call Trace:...

GSD-2022-1000054 sctp: use call_rcu to free endpoint

sctp: use callrcu to free endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit 75799e71df1da11394740b43ae5686646179561d, ...

GSD-2022-1000027 sctp: use call_rcu to free endpoint

sctp: use callrcu to free endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit af6e6e58f7ebf86b4e7201694b1e4f3a62cbc3ec,...

PT-2022-28330

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description The issue concerns the use of call rcu to free endpoint in sctp. It was introduced in version v4.14 and is fixed in Linux Kernel version v5.10.90. The actual impact and attack plausibility ha...

PT-2022-28345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the use of call rcu to free endpoint in sctp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...