THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-68162 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns teardown proc_sctp_do_auth() updates the SCTP control socket after changing net.sctp.auth_enable. The handler gets the per-net SCTP state from ctl->data, so an al

[NVD] CVE-2026-68162 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns teardown proc_sctp_do_auth() updates the SCTP control socket after changing net.sctp.auth_enable. The handler gets the per-net SCTP state from ctl->data, so an al

mednvdPublished 2026-08-10

CVE-2026-68162 CVSS: 7.8 HIGH Published: 2026-08-10T13:20:02.570

In the Linux kernel, the following vulnerability has been resolved:

sctp: avoid auth_enable sysctl UAF during netns teardown

proc_sctp_do_auth() updates the SCTP control socket after changing net.sctp.auth_enable. The handler gets the per-net SCTP state from ctl->data, so an already opened sysctl file can still target a network na

Indicators of compromise

CVE-2026-68162cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68162