CVE-2013-4350: The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and...

Security readout for executives and security teams

This is an old Linux kernel information-disclosure flaw. IPv6 SCTP traffic that administrators expected to be protected by IPsec could be sent without the intended encryption path. A remote attacker would need the ability to observe network traffic to gain value from it. Most likely exposure is older Linux systems using SCTP over IPv6 where IPsec encryption was expected for confidentiality. Systems not using SCTP, IPv6 SCTP, or IPsec for this traffic are less likely to be affected. Treat as targeted legacy exposure. It is not evidenced as actively exploited, but it can undermine confidentiality assumptions for specific Linux SCTP IPv6 deployments. Remediate through normal kernel update channels, faster for sensitive or regulated traffic. Mitigation focus: Update affected Linux kernels using vendor security advisories.; Verify vendor kernels include the referenced upstream SCTP IPv6 IPsec fix.; Prioritize systems carrying sensitive SCTP over IPv6 traffic..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.