The vulnerability in the Linux kernel’s SCTP implementation causes the authentication verification routine to always return true when it encounters a null authentication chunk. This shortens authentication checks and leads to silently skipping authentication, allowing an attacker to send data or establish connections without proper validation. This defect exemplifies CWE-303, where the code improperly controls the generation of a security value, effectively bypassing required authentication checks.

The flaw affects the Linux kernel, specifically the SCTP subsystem. No specific kernel version numbers are provided in the advisory, so all versions of the kernel that include the affected sctp_auth_chunk_verify path may be vulnerable until patched. should verify that their running kernel contains the latest security patches from the distribution maintainers.

The advisory provides a CVSS score of 9.8 and an EPSS score of < 1%. It is not listed in the CISA KEV catalog. The flaw allows an attacker to bypass authentication over the network, resulting in significant impact if an SCTP service is exposed to untrusted traffic. The likely attack vector is remote network exploitation, where an attacker sends crafted SCTP packets that trigger the buggy code path. The low EPSS score indicates that exploitation is currently unlikely, but the existence of the vulnerability means that a determined attacker could still attempt to exploit it if they can direct traffic to a vulnerable service.