Acknowledged
Created: Dec 10, 2025
Updated: Dec 12, 2025
Found In Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]sctp: Prevent TOCTOU out-of-bounds write[EOL][EOL]For the following path not holding the sock lock,[EOL][EOL] sctp_diag_dump() -> sctp_for_each_endpoint() -> sctp_ep_dump()[EOL][EOL]make sure not to exceed bounds in case the address list has grown[EOL]between buffer allocation (time-of-check) and write (time-of-use).