CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL
In the Linux kernel, the following vulnerability has been resolved:
sctp: auth: verify auth requirement when authchunk is NULL
sctpauthchunkverify() returns true unconditionally when chunk->authchunk is NULL, silently skipping authentication. This is incorrect when:
1. skbclone() failed in the BH receive path, leaving authchunk NULL. In sctpendpointbhrcv() asoc is NULL for new connections, so the early sctpauthrecvcid() check cannot catch this.
2. No AUTH chunk precedes COOKIE-ECHO, so skbclone() is never called and authchunk remains NULL.
Fix by checking sctpauthrecvcid() when authchunk is NULL: if authentication is required, return false to drop the chunk; otherwise continue normally.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68300?
CVE-2026-68300 has a risk score of 51, indicating a moderate vulnerability.
How do I fix CVE-2026-68300?
To fix CVE-2026-68300, ensure that you update your Linux kernel to the latest version where this vulnerability has been resolved.
What systems are affected by CVE-2026-68300?
CVE-2026-68300 affects systems running specific versions of the Linux kernel that utilize SCTP (Stream Control Transmission Protocol) authentication.
What type of attack can CVE-2026-68300 facilitate?
CVE-2026-68300 can facilitate unauthorized access or bypass of authentication due to the failure in verifying authentication requirements.
When was CVE-2026-68300 published?
CVE-2026-68300 was published on August 10, 2026.