A critical authentication bypass vulnerability in the Linux kernel SCTP stack allows remote, unauthenticated attackers to potentially achieve full system compromise.

The sctp_auth_chunk_verify function incorrectly returns true when an authentication chunk is missing, causing the system to silently skip mandatory authentication checks for unauthenticated remote callers.

This vulnerability carries a CVSS score of 9.8, indicating a critical risk to business continuity and data integrity. Because this flaw allows an unauthenticated attacker to bypass security controls in the network stack, it could lead to unauthorized remote code execution, sensitive data exfiltration, or complete denial of service for affected systems.

Immediate Action: Update the Linux kernel to the corrected versions (5.10.265, 5.15.216, 6.1.183, 6.6.148, or later) immediately.

Proactive Monitoring: Monitor network traffic for anomalous SCTP packets and review system logs for unexpected connection attempts or kernel-level errors related to the SCTP subsystem.

Compensating Controls: Implement network-level filtering or firewall rules to restrict access to SCTP ports if immediate patching is not feasible, though this is only a temporary measure.

Public Exploit Available: Unknown

Given the critical severity and the nature of the vulnerability within the kernel network stack, organizations should prioritize patching as a matter of urgency. Administrators must verify their current kernel versions and apply the provided security updates to prevent potential remote exploitation of the SCTP protocol handling.