Out-of-Bounds Write Vulnerability in Linux Kernel's SCTP Module

CVE-2025-40331

What is CVE-2025-40331?

A vulnerability in the SCTP (Stream Control Transmission Protocol) module of the Linux Kernel allows for an out-of-bounds write during operations when the required socket lock is not held. This issue occurs in the function chain from sctp_diag_dump() to sctp_ep_dump(), specifically when handling an address list that may have changed size between the time of checking and the time of use. Effective bounds checking is crucial to prevent exploitation and ensure the integrity of the system.

References