PT-2023-8407 · Linux+5 · Linux Kernel+5

Rohit Keshri · Published 2023-06-29 · Updated 2025-04-24 · CVE-2024-0639

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A denial of service issue due to a deadlock was found in the sctp auto asconf init function in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Locking

Weakness Enumeration

CWE-667

CWE-833

Related Identifiers

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-33889

BDU:2024-00673

CVE-2024-0639

OESA-2024-1109

OESA-2024-1110

OESA-2024-1175

OESA-2024-1176

OESA-2024-1180

OPENSUSE-SU-2024_1642-1

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

OPENSUSE-SU-2024_2189-1

SUSE-SU-2024:1642-1

SUSE-SU-2024:1643-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1645-1

SUSE-SU-2024:1650-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

SUSE-SU-2024:1983-1

SUSE-SU-2024:2011-1

SUSE-SU-2024:2135-1

SUSE-SU-2024:2184-1

SUSE-SU-2024:2189-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6740-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Red Os

Suse

Ubuntu

References · 3127

• https://github.com/torvalds/linux/commit/6feb37b3b06e9049e20dcf7e23998f92c9c5be9a · Patch
• https://ubuntu.com/security/CVE-2023-1838 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-0639 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1642-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52600 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46343 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2184-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52451 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1643-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1109 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1659-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1180 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1998 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1110 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20028-1 · Vendor Advisory