CVE-2024-0639 is a denial of service vulnerability caused by a deadlock in the sctp_auto_asconf_init function in net/sctp/socket.c of the Linux kernel's SCTP subsystem. Local users with limited privileges can exploit this flaw to trigger a deadlock, leading to a system crash. The vulnerability has a CVSS 3.1 vector of AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact. Red Hat has issued security advisories and kernel updates to fix this issue in Red Hat Enterprise Linux 9 and related products. The fix requires applying the update and rebooting the system.

Exploitation of this vulnerability allows a local user with limited privileges to cause a deadlock in the SCTP subsystem of the Linux kernel, resulting in a denial of service by crashing the system. There is no impact on confidentiality or integrity, but availability is severely affected.

Red Hat has released official kernel updates that address this vulnerability in Red Hat Enterprise Linux 9 and its variants. Applying the provided kernel update and rebooting the system is required to remediate the issue. Patch status is confirmed by Red Hat advisories. No additional mitigation steps are indicated.