CVE-2026-68161

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SCTP implementation where the network namespace (netns) exit path fails to stop per-net SCTP UDP tunneling sockets. This occurs when net.sctp.udp port is set, allowing a namespace to be torn down while its SCTP UDP tunnel sockets remain installed. The proc sctp do udp port() function manages the starting and restarting of these sockets based on sysctl value changes, but the lack of closure during teardown can lead to inconsistencies. The fix involves closing the UDP tunnel sockets within the sctp ctrlsock exit() function after unregistering the per-net sysctl table to prevent race conditions during socket release and ensure sockets are closed before the control socket is destroyed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.