Out-of-bounds read in Linux kernel - CVE-2026-52917

Vulnerability identifier: #VU135461

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-52917

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in the SCTP sock_diag dump-one path when processing an exact association lookup after taking the socket lock on a stale association. A local user can trigger a stale association lookup to disclose sensitive information.

The issue occurs when association state is reaped or detached from the endpoint while the lookup path resumes after blocking on the socket lock.

Linux kernel
openEuler
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-headers
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
python3-perf-debuginfo

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
kernel - update to 5.10.0-331.0.0.232
bpftool - update to 5.10.0-331.0.0.232
bpftool-debuginfo - update to 5.10.0-331.0.0.232
kernel-debuginfo - update to 5.10.0-331.0.0.232
kernel-debugsource - update to 5.10.0-331.0.0.232
kernel-devel - update to 5.10.0-331.0.0.232
kernel-headers - update to 5.10.0-331.0.0.232
kernel-source - update to 5.10.0-331.0.0.232
kernel-tools - update to 5.10.0-331.0.0.232
kernel-tools-debuginfo - update to 5.10.0-331.0.0.232
kernel-tools-devel - update to 5.10.0-331.0.0.232
perf - update to 5.10.0-331.0.0.232
perf-debuginfo - update to 5.10.0-331.0.0.232
python3-perf - update to 5.10.0-331.0.0.232
python3-perf-debuginfo - update to 5.10.0-331.0.0.232

• https://git.kernel.org/stable/c/480f754580b5686b928977d16a59f20cef83ff01
• https://git.kernel.org/stable/c/5425de8bd6e9fe5bd67d158e3348171ae7510117
• https://git.kernel.org/stable/c/5eba3e48d78edd7551b992cb7ba687019b3a78da
• https://git.kernel.org/stable/c/6657af827e21883ae90693e42e7f59a6aab690b5
• https://git.kernel.org/stable/c/78c4f964b2f94e405721c093773f6250e1e676b2
• https://git.kernel.org/stable/c/b2be72d401833194917e44fbd8d8144bb4f2db16
• https://git.kernel.org/stable/c/e97c2a535e23ed0fdd2660993fb3f10d9535c9bc
• https://git.kernel.org/stable/c/f5af203dec6e0e7a6090fcc2130e9f3901bfc84d

• Out-of-bounds read in Linux kernel sctp
• openEuler 22.03 LTS SP4 update for kernel