net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a crafted sctp_accept call. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8767