The Linux kernel SCTP subsystem had a vulnerability where processing duplicate RECONF responses could cause the stream->outcnt counter to underflow. This occurred because a cached RECONF chunk might include multiple request parameters, and duplicate responses could process the same ADD_OUT request multiple times while other parameters were still outstanding. The fix implemented tracks outstanding request types as bits and clears each bit after the first response, ignoring subsequent duplicate responses for the same request to prevent underflow.

The vulnerability could lead to an underflow of the stream->outcnt counter in the SCTP implementation of the Linux kernel. The exact impact of this underflow is not detailed in the provided information, and no exploitation in the wild is known. The underflow could potentially cause incorrect kernel behavior or instability related to SCTP stream management.

A fix has been implemented in the Linux kernel to address this vulnerability by tracking outstanding request types and ignoring duplicate responses. Users should apply the official kernel update that includes this fix once it is available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.