AZL-52914
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-52914.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-52914
- Upstream
- Published
- 2024-10-21T18:15:15Z
- Modified
- 2026-04-01T05:16:31.512607Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2024-49944 affecting package kernel for versions less than 5.15.173.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
sctp: set skstate back to CLOSED if autobind fails in sctplisten_start
In sctplistenstart() invoked by sctpinetlisten(), it should set the skstate back to CLOSED if sctpautobind() fails due to whatever reason.
Otherwise, next time when calling sctpinetlisten(), if sctpsk(sk)->reuse is already set via setsockopt(SCTPREUSEPORT), sctpsk(sk)->bindhash will be dereferenced as skstate is LISTENING, which causes a crash as bind_hash is NULL.
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:sctpinetlisten+0x7f0/0xa20 net/sctp/socket.c:8617 Call Trace: <TASK> __syslistensocket net/socket.c:1883 [inline] __sys_listen+0x1b7/0x230 net/socket.c:1894 __dosyslisten net/socket.c:1902 [inline]
- References