CVE-2011-4348: Linux Kernel

High severity, CVSS 7.1. EPSS: 2.2% chance of exploitation in the next 30 days.

Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers to cause a denial of service (system hang) via SCTP packets. NOTE: in some environments, this issue exists because of an incomplete fix for CVE-2011-2482.

Affected products

• Linux Linux Kernel: up to and including 2.6.28.10; version 2.6.28 only; version 2.6.28.1 only; version 2.6.28.2 only; version 2.6.28.3 only; version 2.6.28.4 only; …

Published 2013-06-08. Last modified 2026-06-16.