CVE-2026-68315

A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. When processing a Stream Reset Incoming Request (RESET_IN_REQUEST) from a peer, the kernel does not properly validate the stream count. This can lead to an integer overflow when calculating the size for the corresponding outgoing request, resulting in an undersized memory allocation. A remote attacker could exploit this vulnerability on interfaces supporting large Maximum Transmission Units (MTU) to trigger a kernel bug, causing a denial of service.

This vulnerability is rated Moderate for Red Hat Enterprise Linux because exploitation requires specific and atypical network configurations, specifically network interfaces configured with a Maximum Transmission Unit (MTU) greater than 65535 bytes, such as IPv6 jumbograms or local loopback. In standard deployment environments, network frames are constrained to standard MTU boundaries where the integer calculation cannot trigger an allocation error. Furthermore, an attacker must have established communication over an active SCTP association to send stream reset requests, limiting exposure primarily to systems providing SCTP services.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.