From: Xin Long > Sent: 08 September 2016 10:49 > Now sctp uses the transport without holding it in sctp_hash_cmp, > it can cause a use-after-free panic. As after it get transport from > hashtable, another CPU may free it, then the members it accesses > may be unavailable memory.
How old is this bug? Is it in any release kernels? David