CVE-2025-22062

CVE-2025-22062 is a Linux kernel vulnerability where mutual exclusion was missing in proc_sctp_do_udp_port(), risking a crash due to unsynchronized calls to sctp_udp_sock_stop() and sctp_udp_sock_start(). The issue is evidenced by syzbot exposé showing a crash/OOPS from a non-canonical address. T...

CVE-2025-22062 sctp: add mutual exclusion in proc_sctp_do_udp_port()

In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in procsctpdoudpport We must serialize calls to sctpudpsockstop and sctpudpsockstart or risk a crash as syzbot reported: Oops: general protection fault, probably for non-canonical address...