--- title: "CVE-2006-2274\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2006-2274?format=md keywords: index, follow --- # CVE-2006-2274 Publication date 9 May 2006 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp\_skb\_pull function. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux-source-2.6.15 | 7.04 feisty | Not in release | | 6.10 edgy | Not in release | | 6.06 LTS dapper | Fixed 2.6.15-29.58 | | linux-source-2.6.17 | 7.04 feisty | Not in release | | 6.10 edgy | Fixed 2.6.17.1-12.40 | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2274) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-2274) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-2274) * [Debian](https://security-tracker.debian.org/tracker/CVE-2006-2274) ### Related Ubuntu Security Notices (USN) + [USN-302-1](https://usn.ubuntu.com/USN-302-1) + Linux kernel vulnerabilities + 15 June 2006 ### Other references *