CVE-2019-8956

In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.

Affected products

Alt Linux, Linux Kernel, Ubuntu

Linux Linux Kernel

< 4.19.21, 4.20.8

Fix

Available

CVSS 3.1

7.8 HIGH

EPSS

1.1% (64th percentile)

Weakness

CWE-416, CWE-787

NVD status

Modified

Published

2019-04-01