An unauthenticated remote attacker can trigger an out-of-bounds memory read in the Linux kernel SCTP stack, potentially leading to unauthorized information disclosure or system instability.

This vulnerability occurs in the SCTP (Stream Control Transmission Protocol) implementation when processing ERROR chunks. Due to insufficient length validation of the STALE_COOKIE cause, the kernel may read past the intended buffer, resulting in an uninitialized memory leak that is subsequently echoed to the peer.

The flaw carries a CVSS score of 9.1, reflecting its critical nature as it allows for unauthenticated remote exploitation. Successful exploitation poses a significant risk of leaking sensitive kernel memory, which may contain cryptographic keys or authentication tokens, and can be leveraged to cause system crashes, leading to significant operational downtime.

Immediate Action: Apply the vendor-provided kernel patches immediately. Ensure your distribution is updated to at least version 5.10.261, 5.15.212, 6.1.178, or 6.6.145 depending on your active LTS branch.

Proactive Monitoring: Monitor system logs for unusual SCTP traffic patterns or recurring kernel panic events. Use network analysis tools to identify malformed SCTP packets targeting the host.

Compensating Controls: If immediate patching is not feasible, restrict access to SCTP-enabled services using host-based firewalls or network access control lists. Disable SCTP support at the kernel level if the protocol is not required for business operations.

Public Exploit Available: Unknown

This vulnerability represents a high-risk exposure due to its potential for remote exploitation without authentication. Organizations must prioritize the deployment of the official kernel patches to prevent information leakage and potential system compromise. If patching cannot be performed immediately, strictly limiting network access to SCTP services is a necessary measure to reduce the attack surface.