CVE-2026-52917

A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) diagnostics. When performing a socket diagnostic (sock_diag) lookup, the system may attempt to access memory related to an SCTP association that has already been freed. This can lead to an out-of-bounds read from unrelated memory, potentially allowing an attacker to access sensitive information or cause a system crash.

This vulnerability is rated as having a Moderate impact because exploitation requires local unprivileged access and precise timing to win a race condition during socket diagnostic queries. In typical Red Hat Enterprise Linux deployments, the SCTP subsystem is not utilized by default services, restricting exposure primarily to environments that explicitly run SCTP-dependent networking workloads. Although an attacker could trigger a denial of service via a kernel panic or potentially read uninitialized kernel memory, the flaw cannot be triggered remotely without existing local access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.