CVE-2025-23142

Q: What is the severity of CVE-2025-23142?

CVE-2025-23142 has a CVSS score of 7.8 (HIGH). A use-after-free vulnerability in the Linux kernel's SCTP implementation allows a race condition where a transport structure can be accessed after being freed. This affects Linux systems using SCTP networking, potentially leading to kernel crashes or information disclosure. Attackers with local access can exploit this to cause denial of service or potentially execute arbitrary code.

7.8 HIGH

📋 TL;DR

A use-after-free vulnerability in the Linux kernel's SCTP implementation allows a race condition where a transport structure can be accessed after being freed. This affects Linux systems using SCTP networking, potentially leading to kernel crashes or information disclosure. Attackers with local access can exploit this to cause denial of service or potentially execute arbitrary code.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific affected versions not specified in CVE; check kernel commits for exact ranges. Likely affects multiple stable kernel versions before fixes.

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ✅ No

Notes: Only affects systems with SCTP protocol enabled and in use. Many distributions don't enable SCTP by default.

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash, or potential arbitrary code execution with kernel privileges resulting in complete system compromise.

🟠

Likely Case

Kernel crash or instability causing denial of service, potentially with kernel memory information disclosure.

🟢

If Mitigated

System remains stable with proper patching; unpatched systems risk crashes under specific SCTP usage patterns.

🌐 Internet-Facing: LOW - SCTP is not commonly exposed to the internet, and exploitation requires local access or specific network conditions.

🏢 Internal Only: MEDIUM - Internal systems using SCTP for communication could be vulnerable to local attackers or malicious insiders.

🎯 Exploit Status

Public PoC: ⚠️ Yes

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access and specific race condition timing. Syzbot reproducer exists but not publicly weaponized.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing commits: 0f7df4899299ce4662e5f95badb9dbc57cc37fa5, 2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee, 3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8, 547762250220325d350d0917a7231480e0f4142b, 5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2

Vendor Advisory: https://git.kernel.org/stable/c/0f7df4899299ce4662e5f95badb9dbc57cc37fa5

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution vendor. 2. Reboot system to load new kernel. 3. Verify kernel version after reboot.

🔧 Temporary Workarounds

Disable SCTP module

linux

Prevent loading of SCTP kernel module to eliminate attack surface

echo 'install sctp /bin/true' >> /etc/modprobe.d/disable-sctp.conf
rmmod sctp

Block SCTP traffic

linux

Use firewall to block SCTP network traffic

iptables -A INPUT -p sctp -j DROP
iptables -A OUTPUT -p sctp -j DROP

🧯 If You Can't Patch

Restrict local user access to systems using SCTP
Monitor for kernel panic/crash events related to SCTP operations

🔍 How to Verify

Check if Vulnerable:

Check if SCTP is in use: 'lsmod | grep sctp' and check kernel version against patched commits

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes the fix commits: 'uname -r' and check with distribution vendor

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages
System crash/reboot events
SCTP-related error messages in dmesg

Network Indicators:

Unexpected SCTP traffic patterns
Multiple failed SCTP connection attempts

SIEM Query:

EventID=41 OR Source="kernel" AND Message="panic" OR Message="Oops" AND Process="sctp"

📊 Metadata

CVE ID: CVE-2025-23142

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-416

EPSS Score: 0.02% exploit probability (6th percentile)

Published: May 1, 2025

Last Updated: November 5, 2025

🔗 References

https://git.kernel.org/stable/c/0f7df4899299ce4662e5f95badb9dbc57cc37fa5 Patch
https://git.kernel.org/stable/c/2e5068b7e0ae0a54f6cfd03a2f80977da657f1ee Patch
https://git.kernel.org/stable/c/3257386be6a7eb8a8bfc9cbfb746df4eb4fc70e8 Patch
https://git.kernel.org/stable/c/547762250220325d350d0917a7231480e0f4142b Patch
https://git.kernel.org/stable/c/5bc83bdf5f5b8010d1ca5a4555537e62413ab4e2 Patch
https://git.kernel.org/stable/c/7a63f4fb0efb4e69efd990cbb740a848679ec4b0 Patch
https://git.kernel.org/stable/c/9e7c37fadb3be1fc33073fcf10aa96d166caa697 Patch
https://git.kernel.org/stable/c/c6fefcb71d246baaf3bacdad1af7ff50ebcfe652 Patch
https://git.kernel.org/stable/c/f1a69a940de58b16e8249dff26f74c8cc59b32be Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html Mailing List,Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html Mailing List,Third Party Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Debian Linux by Debian

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Disable SCTP module

Block SCTP traffic

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities