Remote Yes

Type Incorrect calculation

Description

A race condition was found in the Linux kernel in sctp_destroy_sock. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock held and sp->do_auto_asconf is true, then an element is removed from the auto_asconf_splist without any proper locking.

AVG-1785 linux-zen 5.11.15.zen1-2 Medium Vulnerable

AVG-1784 linux-hardened 5.11.14.hardened1-1 Medium Vulnerable

AVG-1783 linux 5.11.15.arch4-2 Medium Vulnerable

AVG-1741 linux-lts 5.10.31-1 Medium Vulnerable

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b166a20b07382b8bc1dcee2a448715c9c2c81b5b