CVE-2023-53296

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s SCTP (Stream Control Transmission Protocol) implementation. Specifically, the issue arises from a corner case where the association (asoc) out stream count may change after wait for sndbuf. This can lead to a crash when a thread waiting for a send buffer is awakened and attempts to send a message on a non-existing stream. The vulnerability occurs when a client initiates a connection, and another thread concurrently sends messages with a stream number that becomes invalid after processing an INIT ACK.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.