SCTP Association Vulnerability in Linux Kernel

CVE-2026-46227

What is CVE-2026-46227?

A flaw has been identified in the way the Linux kernel handles SCTP associations, specifically related to the SCTP_SENDALL path in sctp_sendmsg(). The issue arises during the iteration over associations, where if the socket lock is dropped, a race condition can occur that results in stale references to cached data. This vulnerability can lead to a use-after-free scenario or type confusion, potentially allowing an attacker to execute arbitrary code through controlled indirect calls. The vulnerability highlights the need for careful re-validation of pointers after socket operations to prevent such weaknesses.

References