CVE-2024-57938
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
net/sctp: Prevent autoclose integer overflow in sctp_association_init()
In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default max_autoclose equals to INT_MAX / HZ, one may set net.sctp.max_autoclose to UINT_MAX. There is code in sctp_association_init() that can consequently trigger overflow.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c | affected | git | 94b7ed0a4896420988e1776942f0a3f67167873e | Unavailable | None listed |
| 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c | affected | git | 081bdb3a31674339313c6d702af922bc29de2c53 | Unavailable | None listed |
| 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c | affected | git | f9c3adb083d3278f065a83c3f667f1246c74c31f | Unavailable | None listed |
| 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c | affected | git | 7af63ef5fe4d480064eb22583b24ffc8b408183a | Unavailable | None listed |
| 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c | affected | git | 271f031f4c31c07e2a85a1ba2b4c8e734909a477 | Unavailable | None listed |
| 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c | affected | git | 2297890b778b0e7c8200d6818154f7e461d78e94 | Unavailable | None listed |
| 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c | affected | git | 4e86729d1ff329815a6e8a920cb554a1d4cb5b8d | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.13 | Unavailable | None listed |
| 5.4.289 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.233 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.176 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.124 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.70 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.9 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.13 | unaffected | original_commit_for_fix | Unavailable | * | None listed |