CVE-2017-5986: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11...

Security readout for executives and security teams

CVE-2017-5986 is a Linux kernel denial-of-service flaw. A local user running a specially timed multithreaded SCTP application could trigger a kernel assertion failure and panic, crashing the host. The sources do not indicate remote exploitation or code execution. Systems are most exposed when they run affected Linux kernels and allow untrusted local users, hosted workloads, or containers to execute code that can use SCTP. Exposure evidence is incomplete because the source bundle does not provide distribution-specific affected version matrices beyond cited advisories. Treat as a patch-management priority for shared Linux hosts. It is not presented as remote takeover, but a local crash can still create service outages on multi-user, container, or hosting platforms. Mitigation focus: Apply vendor kernel updates from your Linux distribution.; For upstream kernels, ensure the fix included before or at Linux 4.9.11 is present.; Review Red Hat and Debian advisories for distribution-specific package status..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.