CVE-2026-68300
Detail
Received This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
sctp: auth: verify auth requirement when auth_chunk is NULL
sctp_auth_chunk_verify() returns true unconditionally when
chunk->auth_chunk is NULL, silently skipping authentication.
This is incorrect when:
1. skb_clone() failed in the BH receive path, leaving auth_chunk
NULL. In sctp_endpoint_bh_rcv() asoc is NULL for new
connections, so the early sctp_auth_recv_cid() check cannot
catch this.
2. No AUTH chunk precedes COOKIE-ECHO, so skb_clone() is never
called and auth_chunk remains NULL.
Fix by checking sctp_auth_recv_cid() when auth_chunk is NULL:
if authentication is required, return false to drop the chunk;
otherwise continue normally.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected]
Change History
4 change records found show changes
CVE Modified by kernel.org
8/19/2026 1:20:41 PM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/stable/c/5a022ac51ad83b4ce6c898f4b9eefc65bd26b247
Added
Reference
https://git.kernel.org/stable/c/6caf0e8590c0bf05a76b0d387726adf3a6f3725c
Added
Reference
https://git.kernel.org/stable/c/a129792b3aef15002746c13522781d92ed3522c3
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"ec2e157fc9678a9bc411305a25aec3fd337d7efb","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"28c5fdce9dd955d2baf5e28987819b6d7cfaf646","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"18957373920caf5cdaf5cf32e5d1d7a99ca7700a","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"83f5031f2a6a49d696eb4cc0898345d12f9c6451","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"8e04823c120b376ef7dab14b60ebf6823aa16c14","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.24","status":"affected"},{"version":"0","lessThan":"2.6.24","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Record truncated, showing 2048 of 2463 characters.
View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"a129792b3aef15002746c13522781d92ed3522c3","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"5a022ac51ad83b4ce6c898f4b9eefc65bd26b247","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"6caf0e8590c0bf05a76b0d387726adf3a6f3725c","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"ec2e157fc9678a9bc411305a25aec3fd337d7efb","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"28c5fdce9dd955d2baf5e28987819b6d7cfaf646","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"18957373920caf5cdaf5cf32e5d1d7a99ca7700a","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"83f5031f2a6a49d696eb4cc0898345d12f9c6451","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"8e04823c120b376ef7dab14b60ebf6823aa16c14","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.24","status":"affected"},{"version":"0","lessThan":"2.6.24","versionType":"semver","status":"unaffected"},{"version":"5.10.265","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.216","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.183","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"
CVE Modified by kernel.org
8/17/2026 1:18:32 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"ec2e157fc9678a9bc411305a25aec3fd337d7efb","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"28c5fdce9dd955d2baf5e28987819b6d7cfaf646","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"18957373920caf5cdaf5cf32e5d1d7a99ca7700a","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"83f5031f2a6a49d696eb4cc0898345d12f9c6451","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"8e04823c120b376ef7dab14b60ebf6823aa16c14","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.24","status":"affected"},{"version":"0","lessThan":"2.6.24","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc5","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"ec2e157fc9678a9bc411305a25aec3fd337d7efb","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"28c5fdce9dd955d2baf5e28987819b6d7cfaf646","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"18957373920caf5cdaf5cf32e5d1d7a99ca7700a","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"83f5031f2a6a49d696eb4cc0898345d12f9c6451","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"8e04823c120b376ef7dab14b60ebf6823aa16c14","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.24","status":"affected"},{"version":"0","lessThan":"2.6.24","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
CVE Modified by kernel.org
8/13/2026 7:17:29 PM
Action
Type
Old Value
New Value
Added
CVSS V3.1
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
New CVE Received from kernel.org
8/10/2026 9:20:19 AM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
sctp: auth: verify auth requirement when auth_chunk is NULL
sctp_auth_chunk_verify() returns true unconditionally when
chunk->auth_chunk is NULL, silently skipping authentication.
This is incorrect when:
1. skb_clone() failed in the BH receive path, leaving auth_chunk
NULL. In sctp_endpoint_bh_rcv() asoc is NULL for new
connections, so the early sctp_auth_recv_cid() check cannot
catch this.
2. No AUTH chunk precedes COOKIE-ECHO, so skb_clone() is never
called and auth_chunk remains NULL.
Fix by checking sctp_auth_recv_cid() when auth_chunk is NULL:
if authentication is required, return false to drop the chunk;
otherwise continue normally.
Added
Reference
https://git.kernel.org/stable/c/18957373920caf5cdaf5cf32e5d1d7a99ca7700a
Added
Reference
https://git.kernel.org/stable/c/28c5fdce9dd955d2baf5e28987819b6d7cfaf646
Added
Reference
https://git.kernel.org/stable/c/83f5031f2a6a49d696eb4cc0898345d12f9c6451
Added
Reference
https://git.kernel.org/stable/c/8e04823c120b376ef7dab14b60ebf6823aa16c14
Added
Reference
https://git.kernel.org/stable/c/ec2e157fc9678a9bc411305a25aec3fd337d7efb
Added
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"ec2e157fc9678a9bc411305a25aec3fd337d7efb","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"28c5fdce9dd955d2baf5e28987819b6d7cfaf646","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"18957373920caf5cdaf5cf32e5d1d7a99ca7700a","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"83f5031f2a6a49d696eb4cc0898345d12f9c6451","versionType":"git","status":"affected"},{"version":"bbd0d59809f923ea2b540cbd781b32110e249f6e","lessThan":"8e04823c120b376ef7dab14b60ebf6823aa16c14","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/sctp/sm_statefuns.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.24","status":"affected"},{"version":"0","lessThan":"2.6.24","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc5","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Quick Info
CVE Dictionary Entry: CVE-2026-68300 NVD
Published Date: 08/10/2026 NVD
Last Modified: 08/19/2026
Source: kernel.org
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
