Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 2.6.24. It stems from the SCTP inbound parser failing to validate block lengths; it accepts declarations of length shorter than a 4-byte general header. Zero-length ASCONF blocks are returned repeatedly under the SCTP-AUTH policy, leading to...