This vulnerability involves a deadlock condition in the sctp_auto_asconf_init function within the net/sctp/socket.c file of the Linux kernel's SCTP subsystem. Local users with privileges can exploit this flaw to cause a denial of service by triggering a deadlock, potentially crashing the system. The issue is tracked as CVE-2024-0639 and has been assigned a CVSS v3.1 base score of 5.5 (medium severity). Red Hat has issued patches for affected kernel versions in Red Hat Enterprise Linux 9, as detailed in their security advisory RHSA-2023:6583. The advisory confirms the availability of an official fix and recommends applying the update and rebooting the system.

Exploitation of this vulnerability results in a denial of service condition by causing a deadlock in the SCTP subsystem of the Linux kernel. This can crash the affected system, impacting availability. There is no indication of confidentiality or integrity impact. The vulnerability requires local user privileges to exploit and does not involve user interaction.

An official fix is available from Red Hat as part of a kernel update for Red Hat Enterprise Linux 9, detailed in advisory RHSA-2023:6583. Users should apply the provided security update and reboot their systems to ensure the vulnerability is remediated. No additional mitigation steps are indicated by the vendor advisory.