CVE-2026-23125

A NULL pointer dereference flaw was found in the Linux kernel's SCTP implementation. When SCTP-AUTH key initialization fails during INITACK processing, the association's shared key asoc-shkey remains NULL while authentication capability flags are already set. If a DATA chunk is subsequently queue...