CVE-2026-68162

A flaw was found in the Stream Control Transmission Protocol (SCTP) implementation within the Linux kernel. This Use-After-Free (UAF) vulnerability occurs during network namespace (netns) teardown. A local attacker with the ability to open a sysctl file could exploit this flaw, potentially leading to a system crash or other undefined behavior due to memory corruption.

This vulnerability is rated as Important severity because arbitrary kernel memory corruption can allow an unprivileged local user to compromise host integrity or execute code with elevated privileges. On typical Red Hat Enterprise Linux installations, the SCTP kernel module is not loaded by default unless explicitly utilized, though multi-tenant or containerized environments granting network namespace permissions expand the attack surface. An attacker must win a race condition during network namespace cleanup while holding an open sysctl descriptor to trigger the condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.