Hide Forgot
An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off. Reference: https://sites.google.com/view/syzscope/warning-held-lock-freed Upstream patch: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a0ff660058b88d12625a783ce9e5c1371c87951f
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1969530]
This was fixed for Fedora with the 4.6.16 stable kernel updates.
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2018-25015