CVE-2026-98548

In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a stale-cookie error When an association is in COOKIE-ECHOED state and the peer sends a bundled ERRORStale CookieDATA packet from one of its non-primary addresses, processing the ERROR chun...

EUVD-2026-103593

In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a stale-cookie error When an association is in COOKIE-ECHOED state and the peer sends a bundled ERRORStale CookieDATA packet from one of its non-primary addresses, processing the ERROR chun...

CVE-2026-98548 sctp: discard the rest of the packet on a stale-cookie error

In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a stale-cookie error When an association is in COOKIE-ECHOED state and the peer sends a bundled ERRORStale CookieDATA packet from one of its non-primary addresses, processing the ERROR chun...

CVE-2026-98548

The Linux kernel contains a use-after-free vulnerability in the SCTP protocol implementation. When an association is in the COOKIE-ECHOED state and receives a bundled [ERROR(Stale Cookie)][DATA] packet from a non-primary address, the system processes the ERROR chunk via sctp_sf_do_5_2_6_stale(). ...