01 Record

CVE-2025-23142

sctp: detect and prevent references to a freed transport in sendmsg

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

sctp: detect and prevent references to a freed transport in sendmsg

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 11.0% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-01 12:55Z1 YR AGO

Last updated

2026-08-05 11:57Z1 MO AGO

Reserved

2025-01-11

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant
CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

20309697484f1eec09f7f94434830e9ca39b2ec632b4b0e79d7660f9df86a64b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxdf132eff463873e14e019a07f387b4d577d6d1f9 to < 547762250220325d350d0917a7231480e0f4142b, df132eff463873e14e019a07f387b4d577d6d1f9 to < 3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8, df132eff463873e14e019a07f387b4d577d6d1f9 to < 0f7df4899299ce4662e5f95badb9dbc57cc37fa5, df132eff463873e14e019a07f387b4d577d6d1f9 to < 7a63f4fb0efb4e69efd990cbb740a848679ec4b0, df132eff463873e14e019a07f387b4d577d6d1f9 to < c6fefcb71d246baaf3bacdad1af7ff50ebcfe652, df132eff463873e14e019a07f387b4d577d6d1f9 to < 9e7c37fadb3be1fc33073fcf10aa96d166caa697, df132eff463873e14e019a07f387b4d577d6d1f9 to < 5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2, df132eff463873e14e019a07f387b4d577d6d1f9 to < 2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee, df132eff463873e14e019a07f387b4d577d6d1f9 to < f1a69a940de58b16e8249dff26f74c8cc59b32be, 26e51e5287eed4d96ea66a3da95429f42940f013, 8b97e045bd6d37f96f161e4d371ae174148e1587, e044554e97e812eb257d073bcc130e0ea653858f, 8376fdc999be008f0e9918db52f1ed8c08f5a1c9, cd947138e8c31e8cfcd489c12e9b97271beb6e79, 3.18.128 to < 3.19, 4.4.166 to < 4.5, 4.9.142 to < 4.10, 4.14.85 to < 4.15, 4.19.6 to < 4.20, 4.20—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/547762250220325d350d0917a7231480e0f4142b
git.kernel.orghttps://git.kernel.org/stable/c/3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8
git.kernel.orghttps://git.kernel.org/stable/c/0f7df4899299ce4662e5f95badb9dbc57cc37fa5
git.kernel.orghttps://git.kernel.org/stable/c/7a63f4fb0efb4e69efd990cbb740a848679ec4b0
git.kernel.orghttps://git.kernel.org/stable/c/c6fefcb71d246baaf3bacdad1af7ff50ebcfe652
git.kernel.orghttps://git.kernel.org/stable/c/9e7c37fadb3be1fc33073fcf10aa96d166caa697
git.kernel.orghttps://git.kernel.org/stable/c/5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2
git.kernel.orghttps://git.kernel.org/stable/c/2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee
git.kernel.orghttps://git.kernel.org/stable/c/f1a69a940de58b16e8249dff26f74c8cc59b32be
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

01 Record index

CVE-2025-23142

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-23142

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References