CVE-2006-2934: Linux Kernel

Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days.

SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.

Affected products

• Linux Linux Kernel: version 2.6.16 only; version 2.6.16.1 only; version 2.6.16.2 only; version 2.6.16.10 only; version 2.6.16.11 only; version 2.6.16.12 only; …

Published 2006-06-30. Last modified 2026-09-23.