Null Dereference Vulnerability in Linux Kernel Affecting SCTP

CVE-2025-40240

What is CVE-2025-40240?

A vulnerability exists in the Linux kernel's handling of SCTP (Stream Control Transmission Protocol) that can lead to a null dereference when processing chunk data buffers. Specifically, if the chunk's skb pointer is checked without appropriately validating chunk->head_skb first, it may cause unexpected behavior or system crashes. The flaw arises when the frag_list is not checked before updating the skb pointer, potentially enabling complications in data transmission and overall system stability. This issue has been addressed in subsequent updates to the kernel.

References