A vulnerability in the Linux kernel SCTP stack allows unauthenticated remote attackers to perform out-of-bounds memory reads, potentially disclosing sensitive kernel memory.

The vulnerability exists in the sctp_verify_param function, which fails to enforce required length checks for Adaptation Layer Indication parameters. An unauthenticated attacker can supply a malformed SCTP packet to trigger an out-of-bounds read, causing the kernel to disclose four bytes of receive buffer memory via the INIT ACK cookie.

The ability to leak kernel memory can lead to the exposure of sensitive data or provide information necessary to bypass security protections like KASLR. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to system confidentiality, particularly for network-facing services that utilize the SCTP protocol.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.151, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor network traffic for malformed SCTP packets or unusual patterns in SCTP association requests that may indicate probing for this vulnerability.

Compensating Controls: If immediate patching is not feasible, consider disabling the SCTP protocol at the kernel level or via firewall rules if it is not required for business operations.

Public Exploit Available: exploit_available (false)

This vulnerability represents a critical risk to kernel-level data integrity and confidentiality. Administrators should prioritize the deployment of the provided kernel patches across all affected infrastructure. Verification of the patch application should be performed immediately following the update to ensure the vulnerability is fully remediated.