All vulnerabilities

Servers and applications

CVE-2026-98548

sctp: discard the rest of the packet on a stale-cookie error

Severity
Critical 9.8
Published
18 Oct 2026
Last changed
24 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
5.15.222, 6.1.189, 6.6.158, 6.12.112, 6.18.55, 7.2.9
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 6.19 before 7.2.9
  • From 6.13 before 6.18.55
  • From 6.7 before 6.12.112
  • From 6.2 before 6.6.158
All 7 release lines
  • From 2.6.12 before 5.10.271
  • From 5.11 before 5.15.222
  • From 5.16 before 6.1.189
  • From 6.2 before 6.6.158
  • From 6.7 before 6.12.112
  • From 6.13 before 6.18.55
  • From 6.19 before 7.2.9

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-98548