← Database

CVE-2024-57938

MEDIUM CVSS: 5.5 Published: 2025-01-21 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default max_autoclose equals to INT_MAX / HZ, one may set net.sctp.max_autoclose to UINT_MAX. There is code in sctp_association_init() that can consequently trigger overflow.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-190, CWE-190

References