CVE-2026-64564

Debian 13 6.12.95 SCTP ASCONF DEL-IP UAF prueba de concepto. root@kitploit: gcc -O2 -static -o lpe lpedebian.6.12.95.c ./lpe...

sctphantom

SCTPhantom — Sitio de seguimiento del use-after-free de SCTP ASCONF en el kernel de Linux Fuente del SCTPhantom , rastreador de estado de parches: un sitio de una sola página que registra qué distribuciones han publicado una corrección para el use-after-free del transporte SCTP ASCONF en el kerne...

CVE-2026-74586

CVE-2026-74586 — Disparador de use-after-free en SCTP ASCONF newtransport Un PoC autónomo y sin privilegios para CVE-2026-74586, un use-after-free en el manejo de ASCONF reconfiguración dinámica de direcciones de SCTP en el kernel de Linux. El crédito por el fallo en sí corresponde a Qing Ming,...

EUVD-2026-64524

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...

PT-2026-79592

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip last asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctp asconf queue teardown...

EUVD-2026-52605

In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the transport the ASCONF chunk is processed against in asconf-transport == chunk-transport, set once in sctprcv. For an ASCONF located...