Description
In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | FreeBSD | FreeBSD 12.1-RELEASE before p9, 11.4-RELEASE before p3, 11.3-RELEASE before p13 | — |
References
- https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc
- https://support.apple.com/kb/HT212317
- https://support.apple.com/kb/HT212319
- https://support.apple.com/kb/HT212325
- https://support.apple.com/kb/HT212323
- https://support.apple.com/kb/HT212324
- https://support.apple.com/kb/HT212321
- https://support.apple.com/kb/HT212318
- 20210427 APPLE-SA-2021-04-26-1 iOS 14.5 and iPadOS 14.5 mailing-list
- 20210427 APPLE-SA-2021-04-26-2 macOS Big Sur 11.3 mailing-list
- 20210427 APPLE-SA-2021-04-26-9 iTunes 12.11.3 for Windows mailing-list
- 20210427 APPLE-SA-2021-04-26-8 iCloud for Windows 12.3 mailing-list
- 20210427 APPLE-SA-2021-04-26-7 Safari 14.1 mailing-list