CVE-2024-0639

Summary

CVE-2024-0639 is a recently disclosed vulnerability affecting the Linux kernel's SCTP (Stream Control Transmission Protocol) subsystem. The issue lies within the sctp_auto_asconf_init function in net/sctp/socket.c. This vulnerability enables local users with privileges to trigger a denial of service condition through a deadlock, potentially crashing the system. The deadlock is a result of improper handling of SCTP messages, leading to a resource exhaustion scenario. This issue should be addressed promptly as it can cause significant disruptions to the system's functionality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.