CVE-2026-68300

The documents describe CVE-2026-68300 in the Linux kernel SCTP auth path, where sctp_auth_chunk_verify() improperly returns true when auth_chunk is NULL, allowing skipped authentication. Two scenarios cause this: skb_clone() failing in BH receive path leaving auth_chunk NULL (new connections, aso...