CVE-2011-4348: Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote...

Security readout for executives and security teams

CVE-2011-4348 is an old Linux kernel networking flaw that can let a remote attacker hang a system by sending SCTP network traffic. The business impact is availability loss, not data theft, based on the supplied sources. Exposure is mainly legacy Linux systems or vendor kernels with an incomplete related fix. Most modern systems are unlikely to run kernels this old, but embedded, appliance, long-lived enterprise, or vendor-backported kernels may still matter. Exposure depends on SCTP support being present and reachable from untrusted networks. Treat this as a legacy availability risk. It is not presented as data compromise, but a remotely triggered system hang can still disrupt critical services if old SCTP-capable systems remain exposed. Mitigation focus: Upgrade affected Linux kernels to a vendor-fixed release or later than 2.6.29.; Check vendor advisories for backported fixes, especially for CVE-2011-2482 related kernels.; Reduce untrusted network reachability to SCTP services where operationally safe..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.