CVE-2026-99128

In the Linux kernel, the following vulnerability has been resolved: sctp: validate chunk length in the inqueue parser SCTP chunks always include a four-byte generic header, but sctpinqpop currently accepts shorter declared lengths. A zero-length chunk leaves chunkend at the current header. When...

CVE-2026-99128

The Linux kernel contains a vulnerability in the SCTP stack where sctp_inq_pop() accepts chunks with declared lengths shorter than the required four-byte generic header. A remote SCTP peer can trigger a receive softirq lockup by sending a zero-length ASCONF chunk. This is exploitable on kernels c...

PT-2026-128121

In the Linux kernel, the following vulnerability has been resolved: sctp: validate chunk length in the inqueue parser SCTP chunks always include a four-byte generic header, but sctp inq pop currently accepts shorter declared lengths. A zero-length chunk leaves chunk end at the current header. Whe...