← Database

CVE-2023-2177

MEDIUM CVSS: 5.5 Published: 2023-04-20 Modified: 2026-06-17

Description

A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-476, CWE-476

References