CVE-2026-89479
A critical use‑after‑free bug in the Linux kernel’s SCTP implementation allows an attacker to send specially crafted packets that can crash the kernel or potentially execute code. The flaw occurs when an SCTP association is deleted but subsequent packets still reference the freed data, leading to memory corruption.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users that have SCTP enabled, including most Linux distributions and servers that run the affected kernel versions.
Real-world impact
An attacker could crash the system or, if the memory corruption is exploited, run arbitrary code with kernel privileges, leading to full system compromise.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited remotely without authentication or user interaction, and it fully compromises confidentiality, integrity, and availability.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the SCTP fix.
NVD-referenced vendor advisory
Timeline
- Sep 11, 2026 · 2d agoPublishedDisclosed and added to the National Vulnerability Database.
- Sep 13, 2026 · 8h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.