CVE-2026-89479

CVE-2026-89479 is a use-after-free in the Linux kernel's SCTP implementation. In sctp_endpoint_bh_rcv(), the association is cached in chunk->asoc and chunk->transport without holding a reference. A remote peer can bundle COOKIE ECHO, SHUTDOWN, and SHUTDOWN ACK in a single packet: the COOKIE...

PT-2026-90195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the SCTP implementation of the Linux kernel. The function sctp endpoint bh rcv caches the association and transport in chunk-asoc and chunk-transport...