CVE-2026-74287

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SCTP implementation where the functions sctp verify asconf() and sctp verify param() fail to verify if the declared length of an embedded address parameter fits within the bounds of the outer parameter for ADD IP, DEL IP, and SET PRIMARY parameters. Subsequently, sctp process param() and sctp process asconf param() pass the embedded parameter to af->from addr param(), which uses the length to parse the payload. A remote attacker can send malformed parameters where the addr param->p.length exceeds the available space, leading to out-of-bounds reads during the processing of INIT or ASCONF paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.