Loading vulnerability…
Linux kernel SCTP authentication key use-after-free
CVE-2022-50243 is a use-after-free vulnerability in the Linux kernel SCTP authentication-key handling. If sctp_auth_asoc_init_active_key() returns an error, the association active key is not updated, but key-management logic can free the previous shared key while the association still references it as its active key. A subsequent SCTP packet send dereferences the freed key through SCTP authentication handling. The fix prevents replacement of the shared key when active-key initialization fails and restores the previous active-key identifier when the corresponding active-key operation fails.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Triggering the flaw causes a freed SCTP authentication key object to be accessed during packet transmission. This can result in kernel memory corruption or a kernel crash/denial of service. The available information does not establish reliable privilege escalation or arbitrary code execution.
If you can’t patch tonight, do this now.
Where prompt kernel updating is not possible, reduce exposure by disabling SCTP where it is not operationally required and restricting untrusted access to SCTP services. Avoid SCTP authentication-key management operations on affected kernels when active-key initialization errors may occur.
Patch, then assume compromise.
Apply a Linux kernel update containing the SCTP authentication-key error-handling fix. For affected Red Hat Enterprise Linux 8.6 extended-support channels, Red Hat provides the fix in kernel version 4.18.0-372.80.1.el8_6. Reboot after installing the updated kernel.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.