Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-8956

In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
flexera

Description

In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

UNKNOWN Linux Kernel

  • 4.20.x prior to 4.20.8affected
  • 4.19.x prior to 4.19.21affected

References