CVE-2026-74469

A flaw was found in the Stream Control Transmission Protocol (SCTP) implementation within the Linux kernel. An integer overflow occurs when the transport_count for an association exceeds its 16-bit limit, causing it to wrap around to zero. This allows a diagnostic dump to write 8 MiB of peer addresses beyond the intended memory buffer, leading to an out-of-bounds write. This memory corruption can result in a denial of service (DoS) due to system instability or crashes.

This vulnerability is rated as having Important impact because heap buffer corruption within kernel memory can induce system crashes or arbitrary kernel memory manipulation. On Red Hat Enterprise Linux, the SCTP kernel module is not loaded by default, substantially reducing out-of-the-box exposure on standard installations. Successful exploitation requires an environment where SCTP is actively utilized and a socket diagnostic query is triggered after an association accumulates tens of thousands of unique peer addresses.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

See the security bulletin for a detailed mitigation procedure.