SB20260912307 - Use-after-free in Linux kernel sctp

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-89479)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 0 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to access freed memory.

The vulnerability exists due to use-after-free in the SCTP endpoint receive loop when processing a specially crafted SCTP packet containing bundled chunks. A remote attacker can send an SCTP packet that deletes an association before subsequent chunks are processed to access freed memory.

Exploitation requires the packet to be processed from the socket backlog in task context.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/47e15a8d12e366d0d261bcbc394394f44418938d
• https://git.kernel.org/stable/c/a713e1b3a265f180ad25a08e17be15d67a2f7149
• https://git.kernel.org/stable/c/ee3f04cf566f6041aa9a0360494fd8db5ade383a
• https://git.kernel.org/stable/c/fa306a40e716c5abcd967475459ce1ebd56e5115