CVE-2011-1573: Linux Kernel

Medium severity, CVSS 5.9. EPSS: 2.7% chance of exploitation in the next 30 days.

net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.

Affected products

• Linux Linux Kernel: before 2.6.34 (fixed in 2.6.34)

Published 2012-02-02. Last modified 2026-06-16.