CVE-2026-72413

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Memory leaks occur in the SCTP implementation during INIT handling. When the sctp verify init() function encounters unrecognized parameters, it allocates an err chunk that is not properly freed in several scenarios: if security sctp assoc request() fails within the sctp sf do 5 1B init() or sctp sf do unexpected init() functions, or during the success path of sctp sf do unexpected init() after copying parameters to the INIT-ACK.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.