{"id":"CVE-2024-49944","revision":"9620f4c1ea86425690a6a9eb392c5aaf","records":[{"revision":"9620f4c1ea86425690a6a9eb392c5aaf","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-49944","aliases":[],"title":"sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start\n\nIn sctp_listen_start() invoked by sctp_inet_listen(), it should set the\nsk_state back to CLOSED if sctp_autobind() fails due to whatever reason.\n\nOtherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)->reuse\nis already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)->bind_hash will\nbe dereferenced as sk_state is LISTENING, which causes a crash as bind_hash\nis NULL.\n\n  KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n  RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617\n  Call Trace:\n   <TASK>\n   __sys_listen_socket net/socket.c:1883 [inline]\n   __sys_listen+0x1b7/0x230 net/socket.c:1894\n   __do_sys_listen net/socket.c:1902 [inline]","state":0,"publishedAt":"2024-10-21T18:02:02.457+00:00","modifiedAt":"2026-10-15T00:54:41.787+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/sctp/socket.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"89bbead9d897c77d0b566349c8643030ff2abeba\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"0e4e2e60556c6ed00e8450b720f106a268d23062\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"dd70c8a89ef99c3d53127fe19e51ef47c3f860fa\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"e7a8442195e8ebd97df467ce4742980ab57edcce\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"9230a59eda0878d7ecaa901d876aec76f57bd455\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"f032e1dac30b3376c7d6026fb01a8c403c47a80d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5e8f3f703ae4e4af65e2695e486b3cd198328863\",\n                            \"lessThan\": \"8beee4d8dee76b67c75dc91fd8185d91e845c160\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/sctp/socket.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.30\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.30\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.323\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.285\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.227\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.168\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.113\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.55\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.14\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11.3\",\n                            \"lessThanOrEqual\": \"6.11.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/89bbead9d897c77d0b566349c8643030ff2abeba","https://git.kernel.org/stable/c/0e4e2e60556c6ed00e8450b720f106a268d23062","https://git.kernel.org/stable/c/dd70c8a89ef99c3d53127fe19e51ef47c3f860fa","https://git.kernel.org/stable/c/e7a8442195e8ebd97df467ce4742980ab57edcce","https://git.kernel.org/stable/c/9230a59eda0878d7ecaa901d876aec76f57bd455","https://git.kernel.org/stable/c/7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7","https://git.kernel.org/stable/c/f032e1dac30b3376c7d6026fb01a8c403c47a80d","https://git.kernel.org/stable/c/e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5","https://git.kernel.org/stable/c/8beee4d8dee76b67c75dc91fd8185d91e845c160"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-49944","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-49944","identifiers":["CVE-2024-49944"]},"retained":false,"historicalAffected":[]}],"coverage":[]}