Description
The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted SCTP traffic.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.9.4-1 | — |
| Debian 13 | linux | 3.9.4-1 | — |
| Debian 12 | linux | 3.9.4-1 | — |
| Debian 6.0 | linux-2.6 | 2.6.32-48squeeze4 | DSA-2766-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +15 | 2.6.32-358.18.1.el6 | RHSA-2013:1173 |
| RHEL 5 | kernel +12 | 2.6.18-348.16.1.el5 | RHSA-2013:1166 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 3 | perf +9 | 2.6.32-358.118.1.openstack.el6 | RHSA-2013:1195 |
Advisories 4
- RHSA-2013:1173 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2766-1 linux-2.6 - several Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2013:1195 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2013:1166 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2013:1166 vendor-advisory
- SUSE-SU-2013:1749 vendor-advisory
- https://github.com/torvalds/linux/commit/f2815633504b442ca0b0605c16bf3d88a3a0fcea
- SUSE-SU-2013:1744 vendor-advisory
- SUSE-SU-2013:1750 vendor-advisory
- RHSA-2013:1173 vendor-advisory
- DSA-2766 vendor-advisory
- openSUSE-SU-2013:1971 vendor-advisory
- SUSE-SU-2013:1748 vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.5
- https://bugzilla.redhat.com/show_bug.cgi?id=976562
- USN-1939-1 vendor-advisory
- [oss-security] 20130620 Re: CVE Request -- Linux kernel: sctp: duplicate cookie handling NULL pointer dereference mailing-list
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2815633504b442ca0b0605c16bf3d88a3a0fcea