Stream Management Flaw in Linux Kernel Affects Scheduling Functionality

CVE-2026-52929

What is CVE-2026-52929?

A flaw in the Linux kernel's Stream Control Transmission Protocol (SCTP) handling allows for a potential null-pointer dereference in the scheduler during outgoing stream management. When an ADD_OUT_STREAMS request is denied, the current implementation only reduces queued chunks and adjusts the outgoing count, leaving behind stale metadata. This can lead to instability if a subsequent re-add tries to reuse the outdated state. To mitigate this issue, the system needs to properly tear down the removed stream state and consistently update the scheduler's streams. The recommended fix ensures that the stream state is correctly managed, maintaining the integrity of scheduler-specific lists.

References