CVE-2026-72021

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the IPVS (IP Virtual Server) component where the set sctp state() function incorrectly reads the SCTP chunk header for IPv6 packets containing extension headers. Instead of using the parsed transport offset from ip vs fill iph skb(), the function computes the offset using sizeof(struct ipv6hdr), causing the state machine to read from the wrong memory location. This can lead to incorrect state transitions, such as moving a connection from NONE to ESTABLISHED instead of INIT1 before the SCTP handshake is complete, resulting in incorrect timeout applications and destination counter updates.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.