CVE-2024-53139

A flaw was found in the Linux kernel. A local user can exploit a use-after-free vulnerability in the Stream Control Transmission Protocol (SCTP) subsystem during socket binding operations. Because the sctp_v6_available() function performs device and address lookups without holding the required Read-Copy Update (RCU) lock, a race condition can cause the kernel to access freed memory. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.