CVE-2026-68162

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the SCTP implementation during network namespace teardown. The proc sctp do auth() function updates the SCTP control socket after modifying the net.sctp.auth enable sysctl. Because the handler retrieves the per-net SCTP state from ctl->data, a sysctl file that remains open can target a network namespace while it is being destroyed. This occurs because per-net sysctls were registered in sctp defaults init() before the control socket was created in sctp ctrlsock init(), and remained writable after inet ctl sock destroy() released the control socket. The issue involves the net.sctp.auth enable variable and the proc sctp do auth() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.