CVE-2026-68315

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists when processing a RESET IN REQUEST from a peer. The function sctp process strreset inreq() derives the stream count from the parameter length without verifying if the resulting RESET OUT REQUEST exceeds SCTP MAX CHUNK LEN. On interfaces with an MTU greater than 65535, such as loopback with IPv6 jumbograms, a stream list fitting within the incoming IN parameter can cause a u16 overflow in sctp make strreset req() during the OUT request size calculation. This leads to an undersized skb allocation and a kernel BUG. The vulnerability involves the sctp process strreset inreq() and sctp make strreset req() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.