Kernel Vulnerability in Linux SCTP Network Stack

CVE-2025-39812

What is CVE-2025-39812?

A vulnerability exists in the Linux kernel related to the SCTP (Stream Control Transmission Protocol) network stack, specifically due to improper initialization of certain fields, including sin6_scope_id in the function sctp_v6_from_sk(). This oversight could lead to undefined behaviors, potentially allowing local attackers to exploit the vulnerability. The issue has been addressed by initializing the affected fields, thus enhancing the stability and security of the SCTP implementation within the kernel.

References