CVE-2026-68320

Received Received - Intake

Memory Corruption in Linux Kernel SCTP

Publication date: 2026-08-10

Last updated on: 2026-08-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid sctp_auth_ep_add_chunkid() uses SCTP_NUM_CHUNK_TYPES (20) as the capacity limit for ep->auth_chunk_list, allowing it to hold up to 20 chunk entries (param_hdr.length up to 24). However, the copy destination asoc->c.auth_chunks in struct sctp_cookie is only SCTP_AUTH_MAX_CHUNKS (16) entries (20 bytes). When more than 16 chunks are added, sctp_association_init() memcpy overflows the destination by up to 4 bytes. Fix by using SCTP_AUTH_MAX_CHUNKS as the capacity limit, matching the destination capacity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-19

Generated

2026-08-30

AI Q&A

2026-08-10

EPSS Evaluated

2026-08-29

NVD

CVE-2026-68320

EUVD

EUVD-2026-55421

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's SCTP protocol implementation. It involves a buffer overflow in the sctp_auth_ep_add_chunkid function where the auth_chunk_list capacity check uses an incorrect limit (20) compared to the actual destination buffer size (16). This causes a memcpy overflow of up to 4 bytes when more than 16 chunks are added.

Detection Guidance

This vulnerability is specific to the Linux kernel's SCTP implementation and requires kernel-level inspection. Detection involves checking kernel version and SCTP module behavior. Use commands like 'uname -a' to verify kernel version and 'lsmod | grep sctp' to check if SCTP is loaded. Monitor kernel logs for SCTP-related errors or crashes.

Impact Analysis

This vulnerability could allow an attacker to cause a denial of service or potentially execute arbitrary code on systems using the affected Linux kernel versions. It may lead to system crashes, data corruption, or unauthorized access if exploited.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a memory overflow issue in the Linux kernel's SCTP protocol implementation, which could lead to system instability or crashes but does not inherently impact data protection or privacy requirements.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch the vulnerability. If immediate patching is not possible, consider disabling the SCTP module using 'modprobe -r sctp' or blacklisting it in '/etc/modprobe.d/'. Monitor vendor advisories for updates and test changes in a non-production environment first.

Hi! I’m here to help you understand CVE-2026-68320. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70