CVE-2019-8956 PUBLISHED

In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.

EPSS 1.02% · 77.1th percentile

Risk Scores

EPSS Score
1.02%
77.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-gcp-edge0, 4.18.0-1004.5~18.04.1, 4.18.0-1005.6~18.04.1
Ubuntu:18.04:LTSlinux-azure4.15.0-1009.9, 4.15.0-1012.12, 4.15.0-1013.13
Ubuntu:18.04:LTSlinux-hwe0, 4.18.0-13.14~18.04.1, 4.18.0-14.15~18.04.1

Timeline

References

Open in Interactive Console →