A vulnerability in the Linux kernel SCTP implementation allows a remote SCTP peer to trigger a receive softirq lockup by sending zero-length SCTP chunks. This occurs because the inqueue parser accepts chunks shorter than the required four-byte generic header, leading to repeated processing of malformed chunks and potential kernel soft-lockup. The issue affects kernels built with CONFIG_IP_SCTP and specific SCTP configurations. A patch has been applied to reject chunks shorter than the generic header, preventing the lockup.