A critical use-after-free vulnerability in the Linux kernel SCTP stack could allow an unauthenticated attacker to cause a system crash or potentially execute arbitrary code.

The vulnerability exists in the SCTP (Stream Control Transmission Protocol) subsystem where a chunk transport pointer is not correctly updated during a list move operation. An unauthenticated remote attacker can trigger this flaw by sending specific network sequences that cause the kernel to access freed memory when a transport is removed.

The flaw carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation could lead to a complete denial of service through kernel panic, or in some configurations, the execution of arbitrary code with kernel-level privileges, resulting in total loss of confidentiality, integrity, and availability.

Immediate Action: Update your Linux kernel to version 5.10.265, 5.15.216, 6.1.183, or 6.6.152 or later, depending on your distribution branch.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the SCTP module, which may indicate attempted exploitation.

Compensating Controls: If patching is not immediately feasible, consider disabling the SCTP protocol at the kernel level or via firewall rules if it is not required for application functionality.

Public Exploit Available: Unknown.

This is a high-severity kernel vulnerability that requires immediate attention from system administrators. Given the potential for remote exploitation, prioritize the deployment of the provided kernel patches across all affected environments to eliminate the risk of kernel-level memory corruption.