CVE-2024-50299

Summary

CVE-2024-50299 is a newly identified vulnerability in the Linux kernel. It affects the sctp (Stream Control Transmission Protocol) module and stems from a failure to properly validate chunk sizes in the function sctp_sf_ootb(). This issue can result in a crash, as reported by syzbot, and may potentially be exploited by an attacker to execute arbitrary code. The reported crash occurs in multiple functions, including sctp_do_sm(), sctp_endpoint_bh_rcv(), and ip_protocol_deliver_rcu(). To address this vulnerability, a size validation fix similar to Commit 50619dbf8db7 is required in sctp_sf_ootb().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.