CVE-2011-1573: net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, doe...

Security readout for executives and security teams

This is an old Linux kernel SCTP flaw that could let a remote attacker crash affected systems. The issue only applies to kernels before 2.6.34 when SCTP ADD-IP and SCTP authentication are both enabled. The documented impact is denial of service, not data theft or code execution. Exposure is most likely on legacy Linux systems running kernels before 2.6.34 with SCTP enabled and both ADD-IP and authentication configured. Modern supported distributions are unlikely to remain affected if kernel security updates are current. Treat this as a legacy infrastructure hygiene issue unless exposed SCTP services still exist. Prioritize internet-facing or availability-critical Linux systems first, especially unsupported kernels or appliances that have not received vendor security updates. Mitigation focus: Apply vendor kernel updates that include the upstream SCTP fix.; For Red Hat systems, review RHSA-2011:0927 applicability.; Upgrade kernels older than 2.6.34 where still present..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.