GHSA-c4fm-qmm5-xqx8HighCVSS 7.8

In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of...

Published
December 9, 2025
Last Modified
July 30, 2026

🔗 CVE IDs covered (1)

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

sctp: Prevent TOCTOU out-of-bounds write

For the following path not holding the sock lock,

sctp_diag_dump() -> sctp_for_each_endpoint() -> sctp_ep_dump()

make sure not to exceed bounds in case the address list has grown between buffer allocation (time-of-check) and write (time-of-use).

🔗 References (10)