A critical use-after-free vulnerability exists in the Linux kernel SCTP stack that may lead to arbitrary code execution or system instability.

This is a use-after-free flaw occurring within the SCTP (Stream Control Transmission Protocol) ASCONF chunk handling logic. An unauthenticated remote attacker can trigger this condition by sending specific SCTP packets during peer restart scenarios, causing the kernel to access stale memory pointers.

The CVSS score of 9.8 reflects the severity of this flaw, as it allows for remote code execution without user interaction or authentication. Successful exploitation could result in full system compromise, unauthorized data access, or persistent denial of service, posing a significant risk to the integrity and availability of critical infrastructure running affected Linux kernel versions.

Immediate Action: Update the Linux kernel to the versions specified in the OSV enrichment data (5.10.265, 5.15.216, 6.1.183, 6.6.152, or later) immediately.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unusual SCTP traffic patterns that could indicate attempted exploitation of the networking stack.

Compensating Controls: If patching is not immediately feasible, restrict exposure of SCTP-based services to trusted networks and implement network-level filtering to drop malformed or unexpected SCTP control packets.

Public Exploit Available: Unknown.

Given the critical CVSS severity and the low complexity of the attack vector, organizations must prioritize patching their Linux kernels. Apply the provided security updates through your standard distribution channels as soon as they become available to mitigate the risk of remote system compromise.