CVE-2026-72383
Received Received - Intake

Use-After-Free in Linux Kernel SCTP

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: sctp: fix addr_wq_timer race in sctp_free_addr_wq() sctp_free_addr_wq() previously removed addr_wq_timer using timer_delete() while holding addr_wq_lock. However, timer_delete() does not guarantee that a currently running timer handler has completed. This allows a race with sctp_addr_wq_timeout_handler(), where the handler may still run after addr_waitq has been freed, acquire addr_wq_lock, and access freed memory, leading to a use-after-free. Fix this by calling timer_shutdown_sync() before taking addr_wq_lock. This guarantees that any in-flight timer handler has finished and prevents the timer from being re-armed during teardown, making subsequent cleanup safe.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72383
EUVD
EUVD-2026-59282

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free vulnerability in the Linux kernel's SCTP implementation. It occurs in the sctp_free_addr_wq() function where a timer is deleted while holding a lock, but the timer handler might still be running. This can lead to the handler accessing freed memory after the address work queue has been freed, causing a use-after-free condition.

Detection Guidance

This vulnerability is specific to the Linux kernel's SCTP implementation and may not have direct network detection commands. Check kernel logs for SCTP-related errors or crashes using: dmesg | grep sctp. Verify kernel version with uname -r and compare against patched versions.

Impact Analysis

This vulnerability could allow an attacker to cause a denial-of-service condition or potentially execute arbitrary code with kernel privileges. It affects systems using the Linux kernel with SCTP support, potentially leading to system crashes or unauthorized access.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for CVE-2026-72383. If immediate patching is not possible, disable SCTP if not required by running: sysctl -w net.sctp.addip_enable=0. Monitor system logs for use-after-free errors.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72383. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart