Threats tagged 'ghsa-f2r5-8634-vv9q'

A vulnerability in the Linux kernel SCTP implementation allows a remote attacker to cause a soft lockup (denial of service) by sending a crafted ASCONF-ACK parameter with unpadded or malformed length fields. This desynchronizes parameter iteration, causing an infinite loop in kernel softirq context. Additionally, an out-of-bounds read can occur due to insufficient length checks on SCTP_PARAM_ERR_CAUSE parameters. The issue affects specific Linux kernel versions and was discovered by Tencent Yunding Lab's ZeroHive.