CVE-2026-98614
Received
Received - Intake
SCTP Path Update Livelock in Linux Kernel
Vulnerability report for CVE-2026-98614, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-18
Last updated on: 2026-10-18
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
sctp: avoid livelock while updating retransmit path
sctp_assoc_update_retran_path() can loop forever when every remaining
transport, including retran_path, is SCTP_UNCONFIRMED: the state check
runs before the wraparound test, so the loop cannot observe that it has
completed a full pass.
Fix this by considering a transport only when it is not UNCONFIRMED,
then checking whether the walk has returned to retran_path. This makes
the full-pass termination independent of the transport state while
preserving the existing fallback selection semantics.
Also restore the NULL guard around the retran_path assignment. In the
all-UNCONFIRMED case there is no eligible replacement transport, and
installing NULL would leave later retransmit-path users and the debug
print with a NULL path.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 |
| Linux | Linux | 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 |
| Linux | Linux | 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 |
| Linux | Linux | 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 |
| Linux | Linux | 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 |
| Linux | Linux | 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 |
| Linux | Linux | 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 |
| Linux | Linux | 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 |
| Linux | Linux | 8ceaec02b17397d12719a282945abc95f8149d9f |
| Linux | Linux | d2c2bdcdd8c5ce3d2a68aa3353ed1f340c3e500e |
| Linux | Linux | 3.10.106 |
| Linux | Linux | 3.12.71 |
| Linux | Linux | 3.14 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
