CVE-2026-68320

The CVE-2026-68320 issue in the Linux kernel SCTP path stems from sctp_auth_ep_add_chunkid() using SCTP_NUM_CHUNK_TYPES (20) as the capacity for ep->auth_chunk_list, while the destination in sctp_cookie (asoc->c.auth_chunks) only holds SCTP_AUTH_MAX_CHUNKS (16) entries. When more than 16 ch...

EUVD-2026-55421

In the Linux kernel, the following vulnerability has been resolved: sctp: fix authchunklist capacity check in sctpauthepaddchunkid sctpauthepaddchunkid uses SCTPNUMCHUNKTYPES 20 as the capacity limit for ep-authchunklist, allowing it to hold up to 20 chunk entries paramhdr.length up to 24. Howeve...