Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53004

In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks sctp_getsockopt_peer_auth_chunks() checks that the caller's optval buffer is large enough for the peer AUTH chunk list with if (len < num_chunks) return -EINVAL; but then writes num_chunks bytes to p->gauth_chunks, which lives at offset offsetof(struct sctp_authchunks, gauth_chunks) == 8 inside optval. The check is missing the sizeof(struct
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0e1b5eec5f6b66d4dceef34f0544422eb6fd1d2a3a19d12a934b60729769eabe
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sctp/socket.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a132e199de69e2a45628aa8534df1bf5d44e1b6e","status":"affected","version":"65b07e5d0d09c77e98050b5f0146ead29e5add32","versionType":"git"},{"lessThan":"2b5a2c957c7769d40110f725cf23987fcef50d75","status":"affected","version":"65b07e5d0d09c77e98050b5f0146ead29e5add32","versionType":"git"},{"lessThan":"d45c7e99caf915b0f6c716bd8ffe9d45b9685761","status":"affected","version":"65b07e5d0d09c77e98050b5f0146…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/sctp/socket.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.24"},{"lessThan":"2.6.24","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessTha…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sctp/socket.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a132e199de69e2a45628aa8534df1bf5d44e1b6e","status":"affected","version":"65b07e5d0d09c77e98050b5f0146ead29e5add32","versionType":"git"},{"lessThan":"2b5a2c957c7769d40110f725cf23987fcef50d75","status":"affected","version":"65b07e5d0d09c77e98050b5f0146ead29e5add32","versionType":"git"},{"lessThan":"d45c7e99caf915b0f6c716bd8ffe9d45b9685761","status":"affected","version":"65b07e5d0d09c77e98050b5f0146…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/sctp/socket.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.24"},{"lessThan":"2.6.24","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessTha…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0cf004ffb61cd32d140531c3a84afe975f9fc7ea"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/2b5a2c957c7769d40110f725cf23987fcef50d75"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/6849b995cda88a677bf08a05765d1db7905974fc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/6bcf8fe4ef7967b22b814cbae9a57bbd3c853410"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/70a089cc9590aa347a61e84434116ab74619e3c3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/a132e199de69e2a45628aa8534df1bf5d44e1b6e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/d45c7e99caf915b0f6c716bd8ffe9d45b9685761"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/d67fbc6dea5dbf7f46c618ebf65910a276078e20"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:30d9f28e911f87619476eb168a6ada9e9af18dfc0d8153b86edfd5b0805b73c6 · sha256:249778164270f31f… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer