The issue is related to insufficient input validation when handling SCTP packets, which may allow a remote attacker to gain unauthorized access to protected information. This could lead to remote information disclosure to an on-path attacker with no additional execution privileges needed. The vulnerability is due to a missing bounds check in functions such as `sctp v6 to sk daddr` and `sctp v4 from addr param`, potentially causing an out of bounds read. User interaction is not required for exploitation.