---
id: CVE-2026-68300
title: >-
  kernel: sctp: auth: verify auth requirement when auth_chunk is NULL
  (CVE-2026-68300)
summary: >-
  A flaw was found in the Stream Control Transmission Protocol (SCTP)
  authentication mechanism within the Linux kernel. The
  `sctp_auth_chunk_verify()` function incorrectly processes authentication
  chunks, leading to authentication requiremen…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: vendor
cwe: CWE-303
vendor: Red Hat
product: Red Hat Enterprise Linux BaseOS (v. 9)
affected:
  - enterprise_linux 10
  - enterprise_linux 6
  - enterprise_linux 7
  - enterprise_linux 9
  - enterprise_linux_appstream_v_9
  - enterprise_linux_baseos_v_8
  - enterprise_linux_baseos_v_9
  - enterprise_linux_crb_v_8
  - enterprise_linux_codeready_linux_builder_v_9
  - enterprise_linux_nfv_v_8
  - enterprise_linux_real_time_for_nfv_v_9
  - enterprise_linux_rt_v_8
  - enterprise_linux_real_time_v_9
patched:
  - enterprise_linux_appstream_v_9
  - enterprise_linux_baseos_v_8
  - enterprise_linux_baseos_v_9
  - enterprise_linux_crb_v_8
  - enterprise_linux_codeready_linux_builder_v_9
  - enterprise_linux_nfv_v_8
  - enterprise_linux_real_time_for_nfv_v_9
  - enterprise_linux_rt_v_8
  - enterprise_linux_real_time_v_9
published: '2026-08-10'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T23:12:30+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68300.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68300.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-68300'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2513408'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-68300'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-68300'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2026081029-CVE-2026-68300-ab03@gregkh/T
  - url: 'https://access.redhat.com/errata/RHSA-2026:67150'
  - url: 'https://access.redhat.com/errata/RHSA-2026:66325'
  - url: 'https://access.redhat.com/errata/RHSA-2026:66324'
  - url: 'https://git.kernel.org/stable/c/a129792b3aef15002746c13522781d92ed3522c3'
  - url: 'https://git.kernel.org/stable/c/5a022ac51ad83b4ce6c898f4b9eefc65bd26b247'
  - url: 'https://git.kernel.org/stable/c/6caf0e8590c0bf05a76b0d387726adf3a6f3725c'
  - url: 'https://git.kernel.org/stable/c/ec2e157fc9678a9bc411305a25aec3fd337d7efb'
  - url: 'https://git.kernel.org/stable/c/28c5fdce9dd955d2baf5e28987819b6d7cfaf646'
  - url: 'https://git.kernel.org/stable/c/18957373920caf5cdaf5cf32e5d1d7a99ca7700a'
  - url: 'https://git.kernel.org/stable/c/83f5031f2a6a49d696eb4cc0898345d12f9c6451'
  - url: 'https://git.kernel.org/stable/c/8e04823c120b376ef7dab14b60ebf6823aa16c14'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
  - score-dispute
epss: 0.00589
epssPercentile: 0.47065
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-16T15:46:55.343274Z'
scores:
  vendor: 7
  cna: 9.8
ingestedAt: '2026-10-16T17:24:46.856Z'
---

## Overview

A flaw was found in the Stream Control Transmission Protocol (SCTP) authentication mechanism within the Linux kernel. The `sctp_auth_chunk_verify()` function incorrectly processes authentication chunks, leading to authentication requirements being silently bypassed. This can occur under specific conditions, such as when memory allocation fails or when an authentication chunk is missing before a COOKIE-ECHO message. An attacker could potentially exploit this to bypass intended security controls.

## Vendor advisories

- **RHSA-2026:67150** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9), Red Hat Enterprise Linux Real Time (v. 9) · released 2026-09-14 · [advisory](https://access.redhat.com/errata/RHSA-2026:67150)
- **RHSA-2026:66325** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-09-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:66325)
- **RHSA-2026:66324** · Red Hat · fixed in: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8) · released 2026-09-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:66324)
- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68300.json)

**kernel: sctp: auth: verify auth requirement when auth_chunk is NULL** — rated Moderate by Red Hat. Released 2026-08-10, updated 2026-10-16.

Affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 9

Fixed:

- Red Hat Enterprise Linux AppStream (v. 9)
- Red Hat Enterprise Linux BaseOS (v. 8)
- Red Hat Enterprise Linux BaseOS (v. 9)
- Red Hat Enterprise Linux CRB (v. 8)
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
- Red Hat Enterprise Linux NFV (v. 8)
- Red Hat Enterprise Linux Real Time for NFV (v. 9)
- Red Hat Enterprise Linux RT (v. 8)
- Red Hat Enterprise Linux Real Time (v. 9)

No fix planned:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 9

## Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.

Because of this proactive approach, a patch may be associa… https://access.redhat.com/errata/RHSA-2026:67150
For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.

Because of this proactive approach, a patch may be associa… https://access.redhat.com/errata/RHSA-2026:66325
For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.

Because of this proactive approach, a patch may be associa… https://access.redhat.com/errata/RHSA-2026:66324

Workarounds / mitigations:

- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.