The vulnerability in the Linux kernel’s SCTP implementation causes the authentication verification routine to always return true when it encounters a null authentication chunk. This results in silently skipping authentication, allowing an attacker to send data or establish connections without proper validation. The flaw exemplifies both CWE-287, Authentication Bypass, and CWE-303, Incorrect enforcement of a security check.

The flaw affects the Linux kernel, specifically the SCTP subsystem. No specific kernel version numbers are provided in the advisory, so all versions of the kernel that include the affected sctp_auth_chunk_verify path may be vulnerable until patched. Verify that the running kernel contains the latest security patches from the distribution maintainers.

The advisory provides a CVSS score of 9.8 and an EPSS score of < 1%. It is not listed in the CISA KEV catalog. The flaw allows an attacker to bypass authentication over the network, resulting in significant impact if an SCTP service is exposed to untrusted traffic. The likely attack vector is remote network exploitation, where an attacker sends crafted SCTP packets that trigger the buggy code path. The low EPSS score indicates that exploitation is currently unlikely, but the existence of the vulnerability means that a determined attacker could still attempt to exploit it if they can direct traffic to a vulnerable service.