CVE-2023-2177 (published 2023-04-20T00:00:00)
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.
Affected products: Vendor: n/a
Product: Linux
Versions: Linux Kernel prior to Kernel 5.19 RC17