NetSight
IP …
medium5.5

CVE-2024-57938

In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default ma…

Impact

In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default max_autoclose equals to INT_MAX / HZ, one may set net.sctp.max_autoclose to UINT_MAX. There is code in sctp_association_init() that can consequently trigger overflow.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.13 before 5.4.289
from 5.5 before 5.10.233
from 5.11 before 5.15.176
from 5.16 before 6.1.124
from 6.2 before 6.6.70
from 6.7 before 6.12.9

Weakness classification

CWE-190

References