Linux Kernel SCTP Stream Dequeue Vulnerability Leading to List Corruption

A vulnerability in the Linux kernel's SCTP (Stream Control Transmission Protocol) implementation can lead to a crash due to list corruption. This issue arises because the 'out_curr' stream output queue is not properly cleared when all fragment chunks of the current message are pruned. As a result, an empty output queue can cause a 'list_del' corruption, where the next pointer in the list becomes NULL, leading to a warning and potential crash.

Impact

Exploitation of this vulnerability causes a crash by corrupting the linked list management, specifically in the SCTP scheduling and output queue handling.

Remediation

Users can apply the latest patches from the official Linux kernel repository to address this vulnerability.