Threats tagged 'ghsa-c4fm-qmm5-xqx8'

A high-severity vulnerability in the Linux kernel SCTP implementation involves a time-of-check to time-of-use (TOCTOU) out-of-bounds write. The issue occurs in the sctp_diag_dump() path when the address list grows between buffer allocation and write, potentially leading to memory corruption. This vulnerability has been resolved in the Linux kernel.