CVE-2010-1173: The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, w...

Security readout for executives and security teams

CVE-2010-1173 is a Linux kernel denial-of-service flaw. A remote attacker could crash a vulnerable system by sending malformed SCTP initialization traffic, but only where SCTP is enabled on Linux 2.6.33.3 or earlier. Exposure is most likely on legacy Linux systems running kernel 2.6.33.3 or earlier with SCTP enabled and reachable by untrusted networks. Modern patched distributions are less likely affected. Prioritize remediation for internet-facing or production systems using SCTP on old Linux kernels. For most environments, this is a legacy exposure issue rather than an emergency exploitation event. Mitigation focus: Apply the relevant Linux kernel or distribution security update.; Use vendor advisories to confirm fixed package versions.; Disable SCTP where it is not operationally required..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.