CVE-2010-0008: Linux Kernel

High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days.

The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.

Affected products

• Linux Linux Kernel: up to and including 2.6.22.19; version 2.6 only; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.10 only; …

Published 2010-03-19. Last modified 2026-06-16.