CVE-2026-80890

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

CVE-2026-80890

This Linux kernel SCTP vulnerability affects sctp_unpack_cookie(), which incorrectly skips cookie expiration checks whenever an association already exists—a broader exception than permitted by RFC 9260 Section 5.2.4 . The bug allows an expired Action A restart cookie to reach sctp_sf_do_dupcook_a...

CVE-2026-80890 sctp: reject stale cookies with mismatched verification tags

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

CVE-2026-80890 sctp: reject stale cookies with mismatched verification tags

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

CVE-2026-80890

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

PT-2026-86181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Stream Control Transmission Protocol SCTP implementation where the sctp unpack cookie function fails to perform cookie expiration checks if an association already...