CVE-2026-68300

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SCTP authentication mechanism where the sctp auth chunk verify() function returns true unconditionally when the auth chunk variable is NULL, which allows authentication to be silently skipped. This occurs if skb clone() fails in the BH receive path, leaving auth chunk as NULL, or if no AUTH chunk precedes a COOKIE-ECHO, meaning skb clone() is never called. The failure is further complicated in sctp endpoint bh rcv() because the asoc variable is NULL for new connections, preventing the early sctp auth recv cid() check from detecting the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.