CVE-2026-63971
Publication date 20 July 2026
Last updated 9 October 2026
Ubuntu priority
Description
In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctp_wait_for_connect and peeloff sctp_wait_for_connect() drops and re-acquires the socket lock while waiting for the association to reach ESTABLISHED state. During this window, another thread can peeloff the association to a new socket via getsockopt(SCTP_SOCKOPT_PEELOFF), changing asoc->base.sk. After re-acquiring the old socket lock, sctp_wait_for_connect() returns success without noticing the migration — the caller then accesses the association under the wrong lock in sctp_datamsg_from_user(). Add the same sk != asoc->base.sk check that sctp_wait_for_sndbuf() already has, returning an error if the association was migrated while we slept.
Why is this CVE high priority?
See ubuntu cvss score
Patch details
| Package | Patch details |
|---|
Severity score breakdown
CVSS version:
Base score
7.3 · High
Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Base score
7.8 · High
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Related Ubuntu Security Notices (USN)
- USN-8593-1
- Linux kernel vulnerabilities
- 23 July 2026
- USN-8603-1
- Linux kernel (Azure) vulnerabilities
- 24 July 2026
- USN-8618-1
- Linux kernel vulnerabilities
- 28 July 2026
- USN-8663-1
- Linux kernel (NVIDIA) vulnerabilities
- 20 August 2026
- USN-8664-1
- Linux kernel (NVIDIA BaseOS) vulnerabilities
- 20 August 2026
- USN-8728-1
- Linux kernel (GCP) vulnerabilities
- 7 September 2026
- USN-8728-2
- Linux kernel (Azure) vulnerabilities
- 22 September 2026
- USN-8728-3
- Linux kernel (Oracle) vulnerabilities
- 29 September 2026
- USN-8878-1
- Linux kernel (GCP) vulnerabilities
- 6 October 2026
- USN-8879-1
- Linux kernel (Oracle) vulnerabilities
- 6 October 2026
- USN-8877-1
- Linux kernel (GCP) vulnerabilities
- 6 October 2026
- USN-8875-1
- Linux kernel vulnerabilities
- 6 October 2026
- USN-8886-1
- Linux kernel (NVIDIA Tegra) vulnerabilities
- 6 October 2026
- USN-8903-1
- Linux kernel vulnerabilities
- 8 October 2026
- USN-8906-1
- Linux kernel (IBM) vulnerabilities
- 8 October 2026
- USN-8905-1
- Linux kernel (GCP) vulnerabilities
- 8 October 2026
- USN-8904-1
- Linux kernel (Azure) vulnerabilities
- 8 October 2026
- USN-8903-2
- Linux kernel vulnerabilities
- 9 October 2026
- USN-8875-2
- Linux kernel (NVIDIA) vulnerabilities
- 9 October 2026
- USN-8905-2
- Linux kernel (GCP) vulnerabilities
- 9 October 2026