CVE-2026-68161: sctp: close UDP tunnel sockets during netns teardown
In the Linux kernel, the following vulnerability has been resolved:
sctp: close UDP tunnel sockets during netns teardown
procsctpdoudpport() starts per-net SCTP UDP tunneling sockets when net.sctp.udpport is set, and stops/restarts them when the sysctl value changes. The netns exit path does not stop these sockets, so a namespace can be torn down while its SCTP UDP tunnel sockets are still installed.
Close the UDP tunnel sockets from sctpctrlsockexit() after unregistering the per-net sysctl table. This prevents new sysctl writes from racing in while the sockets are being released, and closes the sockets before the control socket is destroyed.
Event History
Frequently Asked Questions
What is the CVSS score for CVE-2026-68161?
The CVSS score for CVE-2026-68161 is 27, indicating a low severity risk.
What systems are affected by CVE-2026-68161?
CVE-2026-68161 affects systems using the Linux kernel with SCTP UDP tunneling sockets.
How do I mitigate CVE-2026-68161?
To mitigate CVE-2026-68161, ensure your Linux kernel is updated to the latest version where this vulnerability is resolved.
What is the nature of the vulnerability CVE-2026-68161?
CVE-2026-68161 concerns the failure to close UDP tunnel sockets during network namespace teardown in the Linux kernel.
When was CVE-2026-68161 first published?
CVE-2026-68161 was first published on August 10, 2026.