Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-64564
By Ido Mizrahi |
7 August 2026
Linux kernel SCTP ASCONF DEL-IP transport use-after-free via crafted Address Parameter
Linux kernel SCTP ASCONF DEL-IP processing can free asconf->transport then reuse it when a crafted ASCONF includes an Address Parameter L, DEL-IP L, then wildcard DEL-IP 0.0.0.0, triggering a UAF and dangling primary_path/active_path. Patch using kernel.org stable fixes (commits 74e8f3e7, 85aca407, 9b2854f8, d136b29b, fedeb446).