>> If SCTP is NOT compiled in the kernel, are you still vulnerable ? > > No -- we should have mentioned that too. For GENERIC kernel however > SCTP is compiled in. Should probably fix that too, in GENERIC, considering how little used this protocol is. Roger Marquis