CVE-2014-4667: The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not prope...

Security readout for executives and security teams

CVE-2014-4667 is a Linux kernel SCTP flaw that can let a remote attacker disrupt sockets by sending a crafted SCTP packet. It is an availability issue, not described as code execution. Business urgency depends on whether older Linux kernels or vendor-backported packages expose SCTP. Exposure is most likely on systems running Linux kernels before 3.15.2, or older distribution kernels lacking the relevant backport, where SCTP is enabled and reachable. The provided data does not enumerate exact affected distribution package versions. Treat as a targeted availability risk for older Linux systems using SCTP. Patch exposed or business-critical systems first, but do not rank it like a remote code execution issue without additional evidence. Mitigation focus: Apply vendor kernel updates from the relevant Linux distribution advisory.; Upgrade to Linux 3.15.2 or a vendor kernel containing the backported fix.; Review vendor guidance before changing SCTP exposure or kernel configuration..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.