Withdrawn by the publisher.

The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet.

The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet.

kernel: net: insufficient permision checks of netlink messages kernel: aio: insufficient sanitization of head in aio_read_events_ring() Kernel: filter: prevent nla extensions to peek beyond the end of the message Kernel: filter: prevent nla extensions to peek beyond the end of the message kernel: futex: pi futexes requeue issue kernel: DoS with syscall auditing Kernel: missing check during hugepage migration Kernel: target/rd: imformation leakage kernel: sctp: sk_ack_backlog wrap-around problem kernel: x86_64: ptrace: sysret to non-canonical address

kernel: net: insufficient permision checks of netlink messages kernel: ath9k: tid->sched race in ath_tx_aggr_sleep() kernel: powerpc: tm: crash when forking inside a transaction Kernel: net: mac80211: crash dues to AP powersave TX vs. wakeup race kernel: s390: ptrace: insufficient sanitization when setting psw mask kernel: sctp: sk_ack_backlog wrap-around problem

Security update for Linux kernel

Affected: Ubuntu:14.04:LTS: linux

The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet.