CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authen...

Security readout for executives and security teams

CVE-2014-5077 is a Linux kernel denial-of-service issue in SCTP handling. A remote peer may be able to trigger a kernel NULL pointer dereference and OOPS during a specific SCTP association setup sequence when SCTP authentication is enabled. Exposure is most likely on Linux systems running affected kernels through 3.15.8 where SCTP is enabled, SCTP authentication is in use, and untrusted peers can reach SCTP services. The source bundle does not provide precise affected CPEs. Handle during normal vulnerability remediation, with faster action for internet-facing or telecom-style SCTP workloads. Business impact is availability disruption, not confirmed compromise, but kernel-level crashes can still affect critical services. Mitigation focus: Apply kernel updates from the relevant vendor advisory or supported distribution channel.; Prioritize systems exposing SCTP services to untrusted networks.; Review the upstream Linux commit referenced for fixed-kernel lineage..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.