2 matches found
kernel: sctp: auth: verify auth requirement when auth_chunk is NULL
A flaw was found in the Stream Control Transmission Protocol SCTP authentication mechanism within the Linux kernel. The sctpauthchunkverify function incorrectly processes authentication chunks, leading to authentication requirements being silently bypassed. This can occur under specific condition...
9.8CVSS5.9AI score0.00589EPSS
SaveExploits0References5
PT-2026-69700
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCTP authentication mechanism where the sctp auth chunk verify function returns true unconditionally when the auth chunk variable is NULL, which allows...
9.8CVSS5.7AI score0.00589EPSS
SaveExploits0
20