Tracker / CVE-2015-1421
CVE-2015-1421
High 10.0
Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| debian | debian_linux |
| linux | linux_kernel · 2.6.24 → 3.2.67 |
| linux | linux_kernel · 3.11 → 3.12.38 |
| linux | linux_kernel · 3.13 → 3.14.34 |
| linux | linux_kernel · 3.15 → 3.16.35 |
| linux | linux_kernel · 3.17 → 3.18.8 |
| linux | linux_kernel · 3.3 → 3.4.107 |
| linux | linux_kernel · 3.5 → 3.10.70 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.