Dynamic Address Reconfiguration is an SCTP feature that lets an active association add, remove, or replace IP addresses without tearing down the session. That makes SCTP more flexible than protocols that bind communication to one fixed endpoint, especially in multihomed systems where connectivity can shift.
In security terms, this feature matters because it expands the protocol’s control surface inside the kernel. Any bug in address reconfiguration code can become a memory-safety issue, such as a use-after-free or out-of-bounds access, and those flaws may lead to denial of service or privilege escalation. Attackers look for reachable reconfiguration paths, while defenders reduce risk by disabling SCTP where it is unnecessary, limiting exposure with kernel configuration and sysctls, and applying patches quickly. In container environments, a kernel bug in this path can affect the shared host kernel, so isolation alone is not enough.