low3.3
CVE-2021-3655
A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1.
Impact
A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | before 5.14 Version 5.14 |
| Redhat | Enterprise Linux | Version 8.0 |
| Debian | Debian Linux | Version 9.0 |