CVE-2024-44935

A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. A local attacker with low privileges could exploit improper synchronization during concurrent socket operations involving SO_REUSEPORT. This vulnerability, a null-pointer dereference, can lead to a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the sctp kernel module from loading. This can be achieved by creating a blacklist file.

1. Create or edit /etc/modprobe.d/blacklist-sctp.conf:

   install sctp /bin/true
   blacklist sctp
   

2. Regenerate the initramfs:
   • For RHEL 8 and 9: dracut -f -v
   • For RHEL 7: dracut -f
3. Reboot the system for the changes to take effect.

Warning: Disabling the SCTP module may impact applications that rely on this protocol.