Threats tagged 'ghsa-q7q7-437c-qxh7'

CVE-2025-23142 is a use-after-free vulnerability in the Linux kernel SCTP implementation. It arises from a race condition in sctp_sendmsg() where a transport reference may be freed while a message is being sent, leading to access of freed memory. The issue occurs when the sender thread temporarily releases the socket lock and the transport is removed concurrently. The vulnerability has a high severity with a CVSS score of 7.8.