yc-mk8s-sctphantom-mitigation

SCTPhantom Mitigation for Yandex Managed Kubernetes Automatic application of mitigation for the CVE-2026-64564 SCTPhantom vulnerability in the Linux kernel on all worker nodes of a Yandex Managed Kubernetes cluster. Vulnerability Description CVE identifier CVE ID: CVE-2026-64564 CVE link:...

sctphantom

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking site Source for the SCTPhantom patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP ASCONF transport use-after-free in the Linux kernel. Where the facts live Everything about the bug —...

CVE-2019-8956

CVE-2019-8956 sctp-PoC sctp lib must be installed root@kitploit: gcc sctp-2019-8956-poc.c -o sctp-2019-8956-poc -pthread -lsctp -static...

M3UAScan

M3UAScan A Scanner for M3UA protocol to detect Sigtran supporting nodes M3UA stands for MTP Level 3 MTP3 User Adaptation Layer as defined by the IETF SIGTRAN working group in RFC 4666 .M3UA enables the SS7 protocol's User Parts e.g. ISUP, SCCP and TUP to run over IP instead of telephony equipment...

CVE-2020-6514

CVE-2020-6514 Der Exploit Als ich den Exploit schrieb, habe ich ursprünglich die SCTP-Pakete verändert, die an das Zielgerät gesendet wurden, indem ich die Quelle von WebRTC änderte und sie neu kompilierte. Dies war für Angriffe auf Closed-Source-Anwendungen nicht praktikabel, also wechselte ich...

CVE-2026-64564

Debian 13 6.12.95 SCTP ASCONF DEL-IP UAF prova di concetto. root@kitploit: gcc -O2 -static -o lpe lpedebian.6.12.95.c ./lpe...

AZL-98190 CVE-2026-80717 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80717

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80717 sctp: validate Adaptation Indication parameter length

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80717 sctp: validate Adaptation Indication parameter length

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

EUVD-2026-67452

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80717

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80717

CVE-2026-80717 is an information disclosure vulnerability in the Linux kernel SCTP subsystem. The root cause is that sctp_verify_param() accepts a header-only Adaptation Layer Indication parameter because the generic parameter walker only checks for header presence. sctp_process_param() then read...

Linux Distros Unpatched Vulnerability : CVE-2026-80717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its paramete...

tsh-sctp

Tiny SHell - Una backdoor UNIX open-source root@kitploit: Prima di compilare Tiny SHell 1. Prima di tutto, imposta la tua chiave segreta, che si trova in tsh.h; la chiave può avere qualsiasi lunghezza usa almeno 12 caratteri per una maggiore sicurezza. 2. Si consiglia di cambiare SERVERPORT, la...

RLSA-2026:59723 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ksm: use range-walk function to jump over holes in scangetnextrmapitem CVE-2025-68211 kernel: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv CVE-2026-23003 kernel: netfilter:...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

EUVD-2026-66582

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...

RLSA-2026:59821 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode CVE-2026-63886 kernel: netfilter: conntrack: tcp:...

CVE-2026-74752

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. When cookie authentication is disabled, the system improperly validates authentication AUTH fields restored directly from peer-controlled cookie bytes. A local attacker could exploit this by forging RANDOM lengths o...