CVE-2024-0639 | Linux Kernel up to 6.4 SCTP net/sctp/socket.c sctp_auto_asconf_init deadlock

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.4. Affected by this issue is the function sctp_auto_asconf_init of the file net/sctp/socket.c of the component SCTP. The manipulation leads to deadlock.

This vulnerability is handled as CVE-2024-0639. The attack can only be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.