CVE-2006-3745: Linux Kernel

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors.

Affected products

• Linux Linux Kernel: up to and including 2.6.17.9; version 2.4.23 only; version 2.4.24 only; version 2.4.25 only; version 2.4.26 only; version 2.4.27 only; …

Published 2006-08-23. Last modified 2026-06-16.