CVE-2026-72398

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Stream Control Transmission Protocol (SCTP) handshake process. During this process, a server embeds an INIT chunk into a cookie sent via INIT-ACK, which the client later returns via COOKIE-ECHO. When the cookie auth enable variable is disabled, the reconstructed INIT chunk can be tampered with, as it is not protected against modification. This allows for the processing of untrusted data if the INIT is not explicitly validated after unpacking. The issue affects the COOKIE-ECHO processing paths in the functions sctp sf do 5 1D ce() and sctp sf do 5 2 4 dupcook(), and involves insufficient validation in sctp unpack cookie() and sctp verify init() regarding the SCTP CID INIT chunk type and parameter bounds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.