• caglararli@hotmail.com
  • 05386281520

CVE-2024-0639 | Linux Kernel up to 6.4 SCTP net/sctp/socket.c sctp_auto_asconf_init deadlock

Çağlar Arlı      -    15 Views

CVE-2024-0639 | Linux Kernel up to 6.4 SCTP net/sctp/socket.c sctp_auto_asconf_init deadlock

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.4. Affected by this issue is the function sctp_auto_asconf_init of the file net/sctp/socket.c of the component SCTP. The manipulation leads to deadlock. This vulnerability is handled as CVE-2024-0639. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.