An integer overflow in the Linux kernel SCTP stack could allow a local attacker to cause a denial of service or potentially achieve code execution.

The flaw resides in the SCTP (Stream Control Transmission Protocol) implementation, specifically within the sctp_assoc_add_peer function. The function fails to prevent an overflow of the 16-bit transport count, which can be manipulated by an attacker with low privileges.

Successful exploitation can lead to memory corruption, which typically results in a system crash or potentially arbitrary code execution if the attacker can influence the state of the kernel memory. Given the CVSS score of 8.8, this represents a critical risk to the availability and security of the host system.

Immediate Action: Update your Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later.

Proactive Monitoring: Monitor network-related kernel events and watch for unexpected system reboots or unusual behavior in services utilizing SCTP.

Compensating Controls: Use network security policies or firewall rules to limit the ability of untrusted users to initiate or interact with SCTP associations if the protocol is not strictly required.

Public Exploit Available: Unknown

Kernel vulnerabilities in core networking protocols are high-priority items. Administrators should move quickly to patch their systems to prevent potential exploitation of the SCTP stack, which could lead to severe system-wide impacts.