Linux Kernel SCTP Autoclose Integer Overflow Vulnerability in Association Initialization

An integer overflow vulnerability has been identified in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. The issue arises in the 'sctp_association_init()' function, where the 'max_autoclose' parameter can be set to an excessively high value, leading to an overflow condition. By default, 'max_autoclose' is set to INT_MAX divided by HZ, but it can be manually adjusted to UINT_MAX. This vulnerability allows for unintended behavior in the autoclose mechanism of SCTP associations.

Impact

Exploitation of this vulnerability could lead to integer overflow, potentially causing memory corruption or other unintended consequences that could be exploited by an attacker.