In the Linux kernel, the following vulnerability has been resolved:
sctp: detect and prevent references to a freed transport in sendmsg
sctpsendmsg() re-uses associations and transports when possible by doing a lookup based on the socket endpoint and the message destination address, and then sctpsendmsgtoasoc() sets the selected transport in all the message chunks to be sent.
There's a possible race condition if another thread triggers the removal of that selected transport, for instance, by explicitly unbinding an address with setsockopt(SCTPSOCKOPTBINDXREM), after the chunks have been set up and before the message is sent. This can happen if the send buffer is full, during the period when the sender thread temporarily releases the socket lock in sctpwaitforsndbuf().
This causes the access to the transport data in sctpoutqselect_transport(), when the association outqueue is flushed, to result in a use-after-free read.
This change avoids this scenario by having sctptransportfree() signal the freeing of the transport, tagging it as "dead". In order to do this, the patch restores the "dead" bit in struct sctptransport, which was removed in commit 47faa1e4c50e ("sctp: remove the dead field of sctptransport").
Then, in the scenario where the sender thread has released the socket lock in sctpwaitfor_sndbuf(), the bit is checked again after re-acquiring the socket lock to detect the deletion. This is done while holding a reference to the transport to prevent it from being freed in the process.
If the transport was deleted while the socket lock was relinquished, sctpsendmsgto_asoc() will return -EAGAIN to let userspace retry the send.
The bug was found by a private syzbot instance (see the error report [1] and the C reproducer that triggers it [2]).
[
{
"id": "CVE-2025-23142-03b23c07",
"signature_version": "v1",
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"target": {
"file": "net/sctp/transport.c",
"function": "sctp_transport_free"
}
},
{
"id": "CVE-2025-23142-04a15e6b",
"signature_version": "v1",
"digest": {
"length": 1079.0,
"function_hash": "274925542133748243206038479049868684423"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_wait_for_sndbuf"
}
},
{
"id": "CVE-2025-23142-0fe1b979",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218960112431063802857998285476671211076",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"target": {
"file": "net/sctp/socket.c"
}
},
{
"id": "CVE-2025-23142-103947c3",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"target": {
"file": "net/sctp/transport.c"
}
},
{
"id": "CVE-2025-23142-13d604f5",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1a69a940de58b16e8249dff26f74c8cc59b32be",
"target": {
"file": "include/net/sctp/structs.h"
}
},
{
"id": "CVE-2025-23142-1f3c6948",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204249797506101475478652193220047920463",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"target": {
"file": "net/sctp/socket.c"
}
},
{
"id": "CVE-2025-23142-2536ae58",
"signature_version": "v1",
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_sendmsg_to_asoc"
}
},
{
"id": "CVE-2025-23142-2929b902",
"signature_version": "v1",
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_sendmsg_to_asoc"
}
},
{
"id": "CVE-2025-23142-31e618ab",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204249797506101475478652193220047920463",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1a69a940de58b16e8249dff26f74c8cc59b32be",
"target": {
"file": "net/sctp/socket.c"
}
},
{
"id": "CVE-2025-23142-388b3076",
"signature_version": "v1",
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_wait_for_sndbuf"
}
},
{
"id": "CVE-2025-23142-3b4f0f68",
"signature_version": "v1",
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1a69a940de58b16e8249dff26f74c8cc59b32be",
"target": {
"file": "net/sctp/transport.c",
"function": "sctp_transport_free"
}
},
{
"id": "CVE-2025-23142-4e78a64b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"target": {
"file": "net/sctp/transport.c"
}
},
{
"id": "CVE-2025-23142-538a05d9",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"target": {
"file": "net/sctp/transport.c"
}
},
{
"id": "CVE-2025-23142-5ac2c6ae",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1a69a940de58b16e8249dff26f74c8cc59b32be",
"target": {
"file": "net/sctp/transport.c"
}
},
{
"id": "CVE-2025-23142-62ad1e41",
"signature_version": "v1",
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"target": {
"file": "net/sctp/transport.c",
"function": "sctp_transport_free"
}
},
{
"id": "CVE-2025-23142-691579cd",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"target": {
"file": "net/sctp/transport.c"
}
},
{
"id": "CVE-2025-23142-6d36feed",
"signature_version": "v1",
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_wait_for_sndbuf"
}
},
{
"id": "CVE-2025-23142-6f49aefd",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204249797506101475478652193220047920463",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"target": {
"file": "net/sctp/socket.c"
}
},
{
"id": "CVE-2025-23142-711fd25a",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"target": {
"file": "include/net/sctp/structs.h"
}
},
{
"id": "CVE-2025-23142-72c464d7",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"target": {
"file": "include/net/sctp/structs.h"
}
},
{
"id": "CVE-2025-23142-7b1bb11b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"target": {
"file": "include/net/sctp/structs.h"
}
},
{
"id": "CVE-2025-23142-9dab5f24",
"signature_version": "v1",
"digest": {
"length": 2145.0,
"function_hash": "921873884813121413039909984692449735"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_sendmsg_to_asoc"
}
},
{
"id": "CVE-2025-23142-a17a078c",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204249797506101475478652193220047920463",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"211372801106946797275407297984713516771",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"target": {
"file": "net/sctp/socket.c"
}
},
{
"id": "CVE-2025-23142-af1bda4b",
"signature_version": "v1",
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1a69a940de58b16e8249dff26f74c8cc59b32be",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_sendmsg_to_asoc"
}
},
{
"id": "CVE-2025-23142-b212c1bd",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"target": {
"file": "include/net/sctp/structs.h"
}
},
{
"id": "CVE-2025-23142-cc00bc21",
"signature_version": "v1",
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_sendmsg_to_asoc"
}
},
{
"id": "CVE-2025-23142-d185c232",
"signature_version": "v1",
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_wait_for_sndbuf"
}
},
{
"id": "CVE-2025-23142-dd3444f8",
"signature_version": "v1",
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"target": {
"file": "net/sctp/transport.c",
"function": "sctp_transport_free"
}
},
{
"id": "CVE-2025-23142-e1c221ff",
"signature_version": "v1",
"digest": {
"length": 2102.0,
"function_hash": "173263473592678864636782907659294044951"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_sendmsg_to_asoc"
}
},
{
"id": "CVE-2025-23142-eb73c255",
"signature_version": "v1",
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"target": {
"file": "net/sctp/transport.c",
"function": "sctp_transport_free"
}
},
{
"id": "CVE-2025-23142-eebd9309",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"175395105398481174887892025291595506304",
"201528228095708875100127052083772146084",
"130466033329822305998086639510436544973",
"215987233225365495904605657435366790018",
"183681037746677539877567926012520842728"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e7c37fadb3be1fc33073fcf10aa96d166caa697",
"target": {
"file": "include/net/sctp/structs.h"
}
},
{
"id": "CVE-2025-23142-f37ff5e6",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"218960112431063802857998285476671211076",
"336047713203014790464732796591464777215",
"243801988341358017628732688002617997498",
"68925113077003161733709743138166080005",
"92540469283148144035512610269363594004",
"187240915729752398894321099000690684611",
"337020141778554513563694130397574566055",
"182574611157873067810282303556890547463",
"91431142022919076842555362162772814026",
"177511306318166903249272197844926077991",
"3115970628738373105146630460998664122",
"125184338593628246417275755818303737915",
"230495204980271892471840465902817662853",
"317824170079861463037073458487111548084",
"1237239097439654771554025334154673426",
"13800126810018991577858417457479393165",
"227423479389294593665460142384488599826",
"2171529114911972592779549648309170098",
"174978042566466123117083158889600706948",
"199202496558606407434514366391725931111",
"140803791594270377404439492875010779134",
"164123293458162013499274447342205750896",
"32500187671806037306943978909110220374",
"116198590735587143019434446121986103545"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f7df4899299ce4662e5f95badb9dbc57cc37fa5",
"target": {
"file": "net/sctp/socket.c"
}
},
{
"id": "CVE-2025-23142-f6a5c6a2",
"signature_version": "v1",
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1a69a940de58b16e8249dff26f74c8cc59b32be",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_wait_for_sndbuf"
}
},
{
"id": "CVE-2025-23142-f6b74a15",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"55072993437463716066593426502622372894",
"314238406168461635622022889796859883193",
"222149678690454617258092149024725235009",
"221045946265645268727647201131304811116"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"target": {
"file": "net/sctp/transport.c"
}
},
{
"id": "CVE-2025-23142-fcdbc597",
"signature_version": "v1",
"digest": {
"length": 384.0,
"function_hash": "163516039126948766907062263009097388642"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee",
"target": {
"file": "net/sctp/transport.c",
"function": "sctp_transport_free"
}
},
{
"id": "CVE-2025-23142-ff65d8b8",
"signature_version": "v1",
"digest": {
"length": 1036.0,
"function_hash": "157369672411658641308373244684773308949"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a63f4fb0efb4e69efd990cbb740a848679ec4b0",
"target": {
"file": "net/sctp/socket.c",
"function": "sctp_wait_for_sndbuf"
}
}
]