EUVD-2026-71640

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

CVE-2026-80890

This Linux kernel SCTP vulnerability affects sctp_unpack_cookie(), which incorrectly skips cookie expiration checks whenever an association already exists—a broader exception than permitted by RFC 9260 Section 5.2.4 . The bug allows an expired Action A restart cookie to reach sctp_sf_do_dupcook_a...

UBUNTU-CVE-2026-52924

In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association setup/reconfiguration. In this path, the outbound stream scheduler state...