CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation, where a duplicate RECONF response can lead to an underflow of the output counter due to improper handling of outstanding request parameters. This could potentially disrupt data transmission and compromise the integrity of SCTP connections. Organizations using Linux-based systems that rely on SCTP should prioritize addressing this issue to maintain network stability and security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream->outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain more than one request parameter. A duplicate response can therefore find and process the same ADD_OUT request again while another parameter is still outstanding, rolling back outcnt twice and possibly underflowing it. Track outstanding request types as bits and clear each bit after its first response. Later responses for the same request are then ignored.