CVE-2025-22062: sctp: add mutual exclusion in proc_sctp_do_udp_port()

Published Apr 16, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

sctp: add mutual exclusion in procsctpdoudpport()

We must serialize calls to sctpudpsockstop() and sctpudpsockstart() or risk a crash as syzbot reported:

Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] CPU: 1 UID: 0 PID: 6551 Comm: syz.1.44 Not tainted 6.14.0-syzkaller-g7f2ff7b62617 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:kernelsockshutdown+0x47/0x70 net/socket.c:3653 Call Trace: <TASK> udptunnelsockrelease+0x68/0x80 net/ipv4/udptunnelcore.c:181 sctpudpsockstop+0x71/0x160 net/sctp/protocol.c:930 procsctpdoudpport+0x264/0x450 net/sctp/sysctl.c:553 procsyscallhandler+0x3d0/0x5b0 fs/proc/procsysctl.c:601 iterfilesplicewrite+0x91c/0x1150 fs/splice.c:738 dosplicefrom fs/splice.c:935 [inline] directspliceactor+0x18f/0x6c0 fs/splice.c:1158 splicedirecttoactor+0x342/0xa30 fs/splice.c:1102 dosplicedirectactor fs/splice.c:1201 [inline] dosplicedirect+0x174/0x240 fs/splice.c:1227 dosendfile+0xafd/0xe50 fs/readwrite.c:1368 dosyssendfile64 fs/readwrite.c:1429 [inline] sesyssendfile64 fs/readwrite.c:1415 [inline] x64syssendfile64+0x1d8/0x220 fs/readwrite.c:1415 dosyscallx64 arch/x86/entry/syscall64.c:63 [inline]

Affected Software

8 affected componentsFixes available
Linux Linux kernel
Microsoft cbl2 kernel 5.15.182.1-1
Microsoft azl3 kernel 6.6.92.2-1
Microsoft cbl2 kernel 5.15.182.1-1
Linux Linux kernel>=5.11<6.12.23
Linux Linux kernel>=6.13<6.13.11
Linux Linux kernel>=6.14<6.14.2
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
  2. Compensating control

    Add mutual exclusion in proc_sctp_do_udp_port() to serialize calls to sctp_udp_sock_stop() and sctp_udp_sock_start().

Event History

Apr 16, 2025
CVE Published
via MITRE·02:12 PM
Data Sourced
via MITRE·02:12 PM
DescriptionSeverity
Data Sourced
via NVD·03:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 4, 2025
Data Sourced
via Microsoft·05:47 AM
DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2025-22062?

CVE-2025-22062 has a severity rating that indicates a potential crash in the Linux kernel if not addressed.

2

How do I fix CVE-2025-22062?

To fix CVE-2025-22062, update your Linux kernel to the latest patched version.

3

What does CVE-2025-22062 affect?

CVE-2025-22062 affects the Linux kernel's handling of UDP socket operations.

4

Is CVE-2025-22062 a remote exploit vulnerability?

CVE-2025-22062 is not classified as a remote exploit vulnerability, but it can lead to crashes.

5

What systems are impacted by CVE-2025-22062?

CVE-2025-22062 impacts systems running affected versions of the Linux kernel.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203