QwikSec

Security Database

CVE

CWE

Training

CVE-2023-1074

Published: Mar 27, 2023

Modified: Mar 19, 2025

PUBLISHED

Description

A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service.

Vendor	Product	Versions
n/a	kernel	affected `unknown`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2173430

https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=458e279f861d3f61796894cd158b780765a1569f

https://www.openwall.com/lists/oss-security/2023/01/23/1

[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update

mailing-list

[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update

mailing-list

[oss-security] 20231105 Re: Linux Kernel: sctp: KASLR leak in inet_diag_msg_sctpasoc_fill()

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.