The vulnerability in the Linux kernel’s SCTP implementation allows an attacker to send a forged cookie that bypasses validation when cookie authentication is disabled. The malformed cookie can cause the kernel to read beyond allocated memory or write past a zero‑length buffer during key‑vector construction, creating a primitive for a local privilege escalation chain. The flaw is a classic out‑of‑bounds memory error that can be exploited to compromise system integrity.

All Linux kernel releases that include the SCTP module are affected. The issue exists in the socket layer that handles SCTP cookies; any host running a kernel version before the patch, regardless of specific distribution, is vulnerable.

The CVSS base score is not supplied in the data; however, the presence of a local privilege escalation vector and absence of listed KEV exposure suggest moderate to high risk. The EPSS score is unavailable, so current exploitation likelihood cannot be quantified. The flaw can be triggered by sending crafted SCTP COOKIE_ECHO packets over the network, making it a remote‑to‑local attack scenario. If successful, the attacker could gain arbitrary privileges on the affected host.