6 matches found
diagspill
DiagSpill — Linux kernel SCTP sockdiag heap overflow tracking site Source for the DiagSpill patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP peer transport-count overflow in the Linux kernel CVE-2026-74469, an unprivileged local-user path to a...
UBUNTU-CVE-2026-72447
In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctpdiag SCTPDIAG endpoint dumping was traversing endpoint address lists without holding locksock, while those lists could change concurrently via socket operations e.g., bindx...
CVE-2026-72447
In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctpdiag SCTPDIAG endpoint dumping was traversing endpoint address lists without holding locksock, while those lists could change concurrently via socket operations e.g., bindx...
CVE-2026-72447 sctp: hold socket lock when dumping endpoints in sctp_diag
In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctpdiag SCTPDIAG endpoint dumping was traversing endpoint address lists without holding locksock, while those lists could change concurrently via socket operations e.g., bindx...
CVE-2026-72447: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctpdiag SCTPDIAG endpoint dumping was traversing endpoint address lists without holding locksock, while those lists could change concurrently via socket operations e.g., bindx...
CVE-2022-20154
A use-after-free flaw due to a race condition was found in the Linux kernel’s sctpdiag module. This flaw allows a local user to crash or potentially escalate their privileges on the system. Mitigation To mitigate this issue, prevent the sctp module from being loaded. Please see...