CVE-2026-68376

CVE-2026-68376 involves the Linux kernel SCTP implementation. The bug is in the auth_hmacs array within struct sctp_cookie: its size was computed using an extra 2 bytes instead of the full SCTP parameter header size, which is sizeof(struct sctp_paramhdr) = 4 bytes. When four HMAC identifiers are ...