CVE-2026-89477

CVE-2026-89477 is a NULL pointer dereference in the Linux kernel SCTP subsystem , specifically in the stream reconfiguration (RECONF) completion path. When a reconfiguration request is published in asoc->strreset_chunk but has not yet been transmitted, its chunk->transport pointer remains N...

CVE-2026-89477 sctp: fix NULL deref on untransmitted RECONF completion

In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctpprocessstrresetoutreq, sctpprocessstrresetaddstrmout and sctpprocessstrresetresp complete a pending stream reconfiguration request by stopping the reconf timer on the...