CVE-2026-64551
A vulnerability in the Linux kernel's SCTP protocol implementation allows an attacker to trigger a memory error. This occurs when a specifically crafted error message is sent, causing the system to read beyond the intended memory boundaries.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Users running Linux systems that utilize the SCTP protocol are affected.
Real-world impact
An attacker could cause the system to leak uninitialized memory back to them, potentially exposing sensitive information from the system's memory.
Why this severity
The critical score is due to the vulnerability being remotely exploitable over a network without requiring authentication or user interaction, and it can lead to significant information disclosure.
What to do about it
- 01Update the Linux kernel to the version containing the fix for sctp: validate STALE_COOKIE cause length before reading staleness.
NVD-referenced vendor advisory
Timeline
- Jul 27, 2026 · 3d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 11h agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 9h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/08a8f2d13f70392431…
- git.kernel.org/stable/c/1cd23ca80784223fa2…
- git.kernel.org/stable/c/588706ebaf8cdb4a41…
- git.kernel.org/stable/c/6022da37786701df1f…
- git.kernel.org/stable/c/861f884f5471632c73…
- git.kernel.org/stable/c/a257b41ddfe9e327b2…
- git.kernel.org/stable/c/bbd6b2ea966cf57b6a…
- git.kernel.org/stable/c/ebe0a55d954fa8da38…