CVE-2023-2177: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.

Affected products

• Linux Linux Kernel: before 5.19 (fixed in 5.19); version 5.19 only

Published 2023-04-20. Last modified 2026-06-17.