The vulnerability occurs in the Linux kernel’s SCTP implementation when unrecognized parameters are present in an INIT packet. The function sctp_verify_init() creates an err_chunk to report the bad parameters, but the chunk is not freed on several error and success paths, leading to a memory leak. Although the leak does not grant direct code execution, repeatedly sending such packets can gradually deplete system memory, potentially causing service disruption or out‑of‑memory crashes.

All Linux kernel builds that include the SCTP stack are susceptible, as the affected code resides in the core kernel source. Specific kernel versions are not listed, so any system running an unpatched kernel with SCTP enabled may be impacted.

The CVSS score is not provided, but the absence of a CVSS or EPSS score and the lack of listing in the CISA KEV catalog suggest a lower reach but still significant risk in high‑traffic environments. Attackers can likely exploit the flaw by sending crafted SCTP INIT packets with unrecognized parameters. Each packet can increment memory usage through the unreleased err_chunk, potentially leading to a denial of service if repeated often enough. The exploitation requires network access to the affected host via SCTP and does not appear to require authentication. Given the potential scale of memory consumption, the impact is a local or remote denial of service, depending on network exposure.