← Database

CVE-2022-0322

MEDIUM CVSS: 5.5 Published: 2022-03-25 Modified: 2026-06-17

Description

A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).

Affected Platforms

Fedoraproject FedoraOracle Communications Cloud Native Core PolicyLinux Linux KernelOracle Communications Cloud Native Core Network Exposure FunctionOracle Communications Cloud Native Core Binding Support Function

Weakness Type

CWE-681, CWE-704

References