In the Linux kernel, the following vulnerability has been resolved:
sctp: detect and prevent references to a freed transport in sendmsg
sctpsendmsg() re-uses associations and transports when possible by doing a lookup based on the socket endpoint and the message destination address, and then sctpsendmsgtoasoc() sets the selected transport in all the message chunks to be sent.
There's a possible race condition if another thread triggers the removal of that selected transport, for instance, by explicitly unbinding an address with setsockopt(SCTPSOCKOPTBINDXREM), after the chunks have been set up and before the message is sent. This can happen if the send buffer is full, during the period when the sender thread temporarily releases the socket lock in sctpwaitforsndbuf().
This causes the access to the transport data in sctpoutqselect_transport(), when the association outqueue is flushed, to result in a use-after-free read.
This change avoids this scenario by having sctptransportfree() signal the freeing of the transport, tagging it as "dead". In order to do this, the patch restores the "dead" bit in struct sctptransport, which was removed in commit 47faa1e4c50e ("sctp: remove the dead field of sctptransport").
Then, in the scenario where the sender thread has released the socket lock in sctpwaitfor_sndbuf(), the bit is checked again after re-acquiring the socket lock to detect the deletion. This is done while holding a reference to the transport to prevent it from being freed in the process.
If the transport was deleted while the socket lock was relinquished, sctpsendmsgto_asoc() will return -EAGAIN to let userspace retry the send.
The bug was found by a private syzbot instance (see the error report [1] and the C reproducer that triggers it [2]).
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-03b23c07",
"target": {
"function": "sctp_transport_free",
"file": "net/sctp/transport.c"
},
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-04a15e6b",
"target": {
"function": "sctp_wait_for_sndbuf",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 1079.0,
"function_hash": "274925542133748243206038479049868684423"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6fefcb71d246baaf3bacdad1af7ff50ebcfe652",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-0fdfd859",
"target": {
"function": "sctp_sendmsg_to_asoc",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-0fe1b979",
"target": {
"file": "net/sctp/socket.c"
},
"digest": {
"line_hashes": [
"218960112431063802857998285476671211076",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-103947c3",
"target": {
"file": "net/sctp/transport.c"
},
"digest": {
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-19361008",
"target": {
"file": "include/net/sctp/structs.h"
},
"digest": {
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-1bacfc6a",
"target": {
"function": "sctp_sendmsg_to_asoc",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 2145.0,
"function_hash": "921873884813121413039909984692449735"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-1ea8d962",
"target": {
"function": "sctp_transport_free",
"file": "net/sctp/transport.c"
},
"digest": {
"length": 320.0,
"function_hash": "177610443668952091277549175568075401824"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-1f3c6948",
"target": {
"file": "net/sctp/socket.c"
},
"digest": {
"line_hashes": [
"204249797506101475478652193220047920463",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-2536ae58",
"target": {
"function": "sctp_sendmsg_to_asoc",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6fefcb71d246baaf3bacdad1af7ff50ebcfe652",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-27ac4509",
"target": {
"file": "net/sctp/transport.c"
},
"digest": {
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-2929b902",
"target": {
"function": "sctp_sendmsg_to_asoc",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-388b3076",
"target": {
"function": "sctp_wait_for_sndbuf",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6fefcb71d246baaf3bacdad1af7ff50ebcfe652",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-39770232",
"target": {
"function": "sctp_wait_for_sndbuf",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-4e78a64b",
"target": {
"file": "net/sctp/transport.c"
},
"digest": {
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-538a05d9",
"target": {
"file": "net/sctp/transport.c"
},
"digest": {
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-62ad1e41",
"target": {
"function": "sctp_transport_free",
"file": "net/sctp/transport.c"
},
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@547762250220325d350d0917a7231480e0f4142b",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-66731a4f",
"target": {
"file": "net/sctp/socket.c"
},
"digest": {
"line_hashes": [
"218960112431063802857998285476671211076",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"187240915729752398894321099000690684611",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-691579cd",
"target": {
"file": "net/sctp/transport.c"
},
"digest": {
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-6c583a1f",
"target": {
"function": "sctp_wait_for_sndbuf",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 1079.0,
"function_hash": "274925542133748243206038479049868684423"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-6d36feed",
"target": {
"function": "sctp_wait_for_sndbuf",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-6f49aefd",
"target": {
"file": "net/sctp/socket.c"
},
"digest": {
"line_hashes": [
"204249797506101475478652193220047920463",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-711fd25a",
"target": {
"file": "include/net/sctp/structs.h"
},
"digest": {
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6fefcb71d246baaf3bacdad1af7ff50ebcfe652",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-71d2665e",
"target": {
"file": "net/sctp/socket.c"
},
"digest": {
"line_hashes": [
"218960112431063802857998285476671211076",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-72c464d7",
"target": {
"file": "include/net/sctp/structs.h"
},
"digest": {
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-7b1bb11b",
"target": {
"file": "include/net/sctp/structs.h"
},
"digest": {
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-7bfcadc1",
"target": {
"file": "net/sctp/socket.c"
},
"digest": {
"line_hashes": [
"218960112431063802857998285476671211076",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"187240915729752398894321099000690684611",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6fefcb71d246baaf3bacdad1af7ff50ebcfe652",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-849f27ce",
"target": {
"function": "sctp_transport_free",
"file": "net/sctp/transport.c"
},
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-9dab5f24",
"target": {
"function": "sctp_sendmsg_to_asoc",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 2145.0,
"function_hash": "921873884813121413039909984692449735"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-a17a078c",
"target": {
"file": "net/sctp/socket.c"
},
"digest": {
"line_hashes": [
"204249797506101475478652193220047920463",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-b212c1bd",
"target": {
"file": "include/net/sctp/structs.h"
},
"digest": {
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@547762250220325d350d0917a7231480e0f4142b",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-bc4a473f",
"target": {
"function": "sctp_sendmsg_to_asoc",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 2145.0,
"function_hash": "921873884813121413039909984692449735"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6fefcb71d246baaf3bacdad1af7ff50ebcfe652",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-be86f9c3",
"target": {
"file": "include/net/sctp/structs.h"
},
"digest": {
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@547762250220325d350d0917a7231480e0f4142b",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-c11f2d1d",
"target": {
"file": "include/net/sctp/structs.h"
},
"digest": {
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@547762250220325d350d0917a7231480e0f4142b",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-c42d5218",
"target": {
"function": "sctp_transport_free",
"file": "net/sctp/transport.c"
},
"digest": {
"length": 320.0,
"function_hash": "177610443668952091277549175568075401824"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-cc00bc21",
"target": {
"function": "sctp_sendmsg_to_asoc",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-d185c232",
"target": {
"function": "sctp_wait_for_sndbuf",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@547762250220325d350d0917a7231480e0f4142b",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-da88a661",
"target": {
"function": "sctp_wait_for_sndbuf",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 1079.0,
"function_hash": "274925542133748243206038479049868684423"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-dd3444f8",
"target": {
"function": "sctp_transport_free",
"file": "net/sctp/transport.c"
},
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-e1c221ff",
"target": {
"function": "sctp_sendmsg_to_asoc",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-eb73c255",
"target": {
"function": "sctp_transport_free",
"file": "net/sctp/transport.c"
},
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-ec08b989",
"target": {
"file": "net/sctp/transport.c"
},
"digest": {
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-eebd9309",
"target": {
"file": "include/net/sctp/structs.h"
},
"digest": {
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-f37ff5e6",
"target": {
"file": "net/sctp/socket.c"
},
"digest": {
"line_hashes": [
"218960112431063802857998285476671211076",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"187240915729752398894321099000690684611",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-f6b74a15",
"target": {
"file": "net/sctp/transport.c"
},
"digest": {
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@547762250220325d350d0917a7231480e0f4142b",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2025-23142-fc6d0216",
"target": {
"file": "net/sctp/transport.c"
},
"digest": {
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-fcdbc597",
"target": {
"function": "sctp_transport_free",
"file": "net/sctp/transport.c"
},
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2025-23142-ff65d8b8",
"target": {
"function": "sctp_wait_for_sndbuf",
"file": "net/sctp/socket.c"
},
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false
}
]