CVE-2026-68320

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SCTP implementation where the sctp auth ep add chunkid() function uses an incorrect capacity limit for the ep->auth chunk list. While the limit is set to 20 entries, the destination buffer asoc->c.auth chunks within the sctp cookie structure only supports 16 entries. This discrepancy allows a memory overflow of up to 4 bytes during a memcpy operation within the sctp association init() function when more than 16 chunks are added.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.