CVE-2026-80717

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SCTP implementation where the sctp verify param() function accepts an Adaptation Layer Indication parameter that contains only a header, despite the parameter requiring a fixed 32-bit Adaptation Code Point. Consequently, the sctp process param() function reads the adaptation ind variable beyond the declared parameter boundary. If a malformed parameter is positioned last in an INIT chunk, the system reads from the receive skb tail and copies the value into the state cookie returned in the INIT ACK, potentially disclosing four bytes of the receive-buffer tail.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.