A high-severity NULL pointer dereference vulnerability in the Linux kernel SCTP subsystem can be exploited by an unprivileged user to cause a kernel panic and system denial-of-service.

The vulnerability exists in the SCTP stream reconfiguration handling logic, specifically within functions that attempt to dereference a transport pointer before it has been initialized. An unprivileged attacker can trigger this flaw by performing a specific sequence of address removal and stream reset requests, leading to a kernel panic in a softirq context.

The ability for an unprivileged user to crash the host operating system represents a significant risk to service availability. Successful exploitation results in an immediate denial-of-service, which can disrupt critical business applications, cause data loss due to unexpected system termination, and require manual administrative intervention to restore service. With a CVSS score of 7.5, this vulnerability is classified as High severity because it provides a reliable vector for system disruption.

Immediate Action: Update the Linux kernel to the identified fixed versions: 5.10.270, 5.15.221, 6.1.188, or 6.6.157, depending on your distribution branch.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages related to sctp_process_strreset operations, which may indicate attempted exploitation.

Compensating Controls: If patching is not immediately feasible, restrict access to the SCTP protocol or limit the ability of unprivileged users to interact with network namespaces where SCTP reconfiguration is permitted.

Public Exploit Available: No

This vulnerability represents a tangible threat to system stability. Security teams should prioritize patching affected kernels as part of the next maintenance cycle. Given the ease with which an unprivileged user can trigger the panic, organizations hosting untrusted workloads should treat this update with heightened urgency.