Linux Kernel Vulnerability in SCTP Stream Management

CVE-2023-53590

What is CVE-2023-53590?

A vulnerability in the Linux kernel's SCTP (Stream Control Transmission Protocol) management may lead to excessive resource consumption due to nested loops while managing stream priorities. The issue arises from the lack of reference count management in 'sctp_stream_priorities', which can result in a performance degradation or potential system hang. To mitigate this, a reference count has been added, ensuring that the traversal of all streams is unnecessary during the freeing of a stream's priority. This enhancement minimizes the chance of encountering a soft lockup scenario, which can significantly impact CPU performance and system stability.

References