Loading HuntDB...

GHSA-6647-2gmj-c8h8

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.

Related CVEs

Key Information

GHSA ID
GHSA-6647-2gmj-c8h8
Published
May 13, 2022 1:02 AM
Last Modified
May 13, 2022 1:02 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 1, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.