Description (CNA)
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Linux | affected Linux Kernel prior to Kernel 5.19 RC17 |
CWE
CWE-476
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.