A race condition vulnerability in the Linux kernel SCTP subsystem allows a local attacker with low privileges to achieve high system impact, rated as high severity.

This is a race condition flaw within the Stream Control Transmission Protocol implementation, specifically between sctp_wait_for_connect and peeloff functions, requiring low authenticated local privileges with no user interaction.

A successful exploit of this vulnerability could lead to local privilege escalation, arbitrary code execution, or complete system compromise. The CVSS score of 7.8 indicates high severity, as an attacker with local access can manipulate kernel memory states and potentially disrupt business operations or compromise sensitive host data.

Immediate Action: Update the Linux kernel to the latest patched stable releases, such as versions 5.10.259, 5.15.210, 6.1.176, or 6.6.143, where this issue is resolved.

Proactive Monitoring: Monitor system audit logs for unauthorized local user activities, unexpected kernel panics, or anomalous SCTP socket operations.

Compensating Controls: Restrict local shell access and apply strict least-privilege principles to limit which users can execute code on the host system.

Public Exploit Available: false

Security teams should treat kernel race condition vulnerabilities with high urgency. Administrators must apply the latest kernel updates promptly to eliminate the underlying race condition and prevent potential local exploitation.