CVE-2011-2482

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.21 Red Hat Enterprise Linux (RHEL) 5

Description The issue is related to a certain Red Hat patch to the sctp sock migrate function in net/sctp/socket.c in the Linux kernel. It allows remote attackers to cause a denial of service via a crafted SCTP packet, resulting in a NULL pointer dereference and OOPS.

Recommendations For Linux kernel versions prior to 2.6.21, update to version 2.6.21 or later to resolve the issue. For Red Hat Enterprise Linux (RHEL) 5, consider applying a patch or update provided by Red Hat to fix the vulnerability in the sctp sock migrate function.