CVE-2022-0322CWE-681

A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user…

published March 25, 2022

CVSS
—
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.5th percentile
Weakness
CWE-681 · Incorrect Conversion between Numeric Types
Published
2022-03-25T18:02Z
EPSS history
Timeline
  • 25 MAR 18:02Z
    A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user…
    cvelistv5