CVE-2026-68315 | Linux Kernel up to 7.2-rc4 SCTP net/sctp/stream.c sctp_process_strreset_inreq length allocation of resources

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. Impacted is the function sctp_process_strreset_inreq of the file net/sctp/stream.c of the component SCTP. Performing a manipulation of the argument length results in allocation of resources.

This vulnerability is identified as CVE-2026-68315. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.