CVE-2026-68315

The CVE-2026-68315 issue affects the Linux kernel SCTP stack. In sctp_process_strreset_inreq(), the stream count is derived from the IN-parameter length, but there is no validation ensuring the corresponding OUT request fits within SCTP_MAX_CHUNK_LEN. This can lead to a __u16 overflow in sctp_mak...

EUVD-2026-55416

In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctpprocessstrresetinreq When processing a RESETINREQUEST from a peer, sctpprocessstrresetinreq derives the stream count from the parameter length but does not check whether the resulting...