9 matches found
SUSE CVE-2026-74588
In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsngapacked...
SUSE CVE-2026-74688
In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the destination transport in chunk-transport without taking a reference. When srcoutofasocok is enabled, the HEARTBEAT ACK may remain queued o...
CVE-2026-74688
In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the destination transport in chunk-transport without taking a reference. When srcoutofasocok is enabled, the HEARTBEAT ACK may remain queued o...
AZL-97196 CVE-2026-74688 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the destination transport in chunk-transport without taking a reference. When srcoutofasocok is enabled, the HEARTBEAT ACK may remain queued o...
CVE-2026-74688
A use-after-free vulnerability in the Linux kernel's SCTP implementation. The function sctp_make_heartbeat_ack() caches a destination transport pointer without taking a reference. When src_out_of_asoc_ok is enabled, a HEARTBEAT ACK may remain queued on control_chunk_list. If the peer transport is...
CVE-2026-74688 sctp: clear control chunk transport if it is being removed
In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the destination transport in chunk-transport without taking a reference. When srcoutofasocok is enabled, the HEARTBEAT ACK may remain queued o...
EUVD-2026-64525
In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsngapacked...
PT-2026-79693
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the SCTP implementation. The function sctp make heartbeat ack caches the destination transport in the chunk-transport variable without taking a reference...
kernel: vsock: Fix transport_* TOCTOU
A flaw was found in the Linux kernel's vsock virtual socket subsystem. A race condition exists between transport assignment during socket initialization and module unloading, which can leave behind an invalid pointer. A local user can exploit this vulnerability by performing socket operations whi...