Threats tagged 'ghsa-fqw8-ghgv-hjc2'

A vulnerability in the Linux kernel SCTP implementation allowed stale cookies with mismatched verification tags to bypass expiration checks improperly. This flaw permitted replaying expired SCTP cookies under certain conditions, potentially restarting associations incorrectly. The issue was resolved by enforcing cookie expiration checks unless both verification tags match, aligning with RFC 9260 requirements. Multiple specific Linux kernel versions are affected. A patch is available to address this vulnerability.