CVE-2025-22062

Summary

CVE-2025-22062 is a vulnerability affecting the Linux kernel's sctp (Stream Control Transmission Protocol) module. The issue stems from a lack of mutual exclusion in proc_sctp_do_udp_port(), which could result in a crash due to a null pointer dereference. This was discovered by the syzbot project and can lead to a general protection fault. The vulnerability is located in the net/sctp/protocol.c file and can be triggered during a call to sctp_udp_sock_stop() or sctp_udp_sock_start(). To mitigate this issue, proper serialization of these calls is required to prevent potential crashes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.