CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.1.12-1Fixed in 7.1.13-1 - Configuration
In sctp_unpack_cookie(), add a bounds check to validate that the cached peer INIT chunk length (from the cached INIT chunk header/length field) does not exceed the available remaining data in the COOKIE_ECHO buffer before using it.
sctp_unpack_cookie() cached INIT chunk length bounds check = ensure cached INIT chunk length does not exceed remaining COOKIE_ECHO buffer before use
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53246?
The severity of CVE-2026-53246 is ranked at 51.
How do I fix CVE-2026-53246?
To fix CVE-2026-53246, update the Linux kernel to the latest version where this vulnerability has been resolved.
What systems are affected by CVE-2026-53246?
CVE-2026-53246 affects the Linux kernel that implements the SCTP protocol.
What type of vulnerability is CVE-2026-53246?
CVE-2026-53246 is a vulnerability related to improper validation of cached peer INIT chunk length during COOKIE_ECHO processing.
When was CVE-2026-53246 published?
CVE-2026-53246 was published on June 25, 2026.