CVE-2010-3432: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 5.5% chance of exploitation in the next 30 days.

The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 8.04 only; version 9.04 only; version 9.10 only; version 10.04 only; version 10.10 only
• Debian Debian Linux: version 5.0 only
• Linux Linux Kernel: before 2.6.35.6 (fixed in 2.6.35.6)
• Opensuse Opensuse: version 11.3 only
• Suse Linux Enterprise Real Time Extension: version 11 only

Published 2010-11-22. Last modified 2026-06-16.