CVE-2026-68300

A flaw was found in the Stream Control Transmission Protocol (SCTP) authentication mechanism within the Linux kernel. The sctp_auth_chunk_verify() function incorrectly processes authentication chunks, leading to authentication requirements being silently bypassed. This can occur under specific conditions, such as when memory allocation fails or when an authentication chunk is missing before a COOKIE-ECHO message. An attacker could potentially exploit this to bypass intended security controls.

A flaw in the Linux kernel Stream Control Transmission Protocol (SCTP) authentication handling, rated MODERATE by Red Hat, affects the kernel and kernel-rt components in Red Hat Enterprise Linux 6 through 10 (including ELS and z-stream update streams) as well as kernel components in Red Hat In-Vehicle OS. The sctp_auth_chunk_verify() function returns true unconditionally when chunk->auth_chunk is NULL, so SCTP authentication requirements can be silently skipped when skb_clone() fails in the bottom-half receive path or when no AUTH chunk precedes a COOKIE-ECHO chunk. Under those conditions, an attacker able to deliver crafted SCTP traffic to a system that enforces SCTP chunk authentication could have unauthenticated chunks processed as authenticated, compromising the integrity of SCTP associations. Red Hat's MODERATE rating reflects the high attack complexity and specific preconditions required for exploitation, which differs meaningfully from the CRITICAL (CVSS 9.8) severity assigned in the upstream CVE record. A fix is being pursued for the affected Red Hat products through the delegated kernel maintenance process.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.