CVE-2026-53004

A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. An unprivileged local user could exploit an out-of-bounds write vulnerability in the sctp_getsockopt_peer_auth_chunks function. This occurs due to an incorrect size check, allowing the kernel to write past the intended buffer in userspace. This flaw can lead to the silent corruption of adjacent userspace data, impacting data integrity.

This vulnerability is rated as having Moderate impact because it requires local execution privileges to manipulate SCTP socket options, and the resulting out-of-bounds write affects only the calling process's own userspace memory rather than kernel memory. Because kernel memory integrity is not compromised, the flaw cannot be leveraged for direct kernel privilege escalation, limiting the blast radius to potential denial of service or memory corruption within the calling application. Additionally, the SCTP kernel module is not loaded by default unless explicitly configured or requested by network applications on Red Hat Enterprise Linux systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.