CVE-2026-63971

In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctp_wait_for_connect and peeloff sctp_wait_for_connect() drops and re-acquires the socket lock while waiting for the association to reach ESTABLISHED state. During this window, another thread can peeloff the association to a new socket via getsockopt(SCTP_SOCKOPT_PEELOFF), changing asoc->base.sk. After re-acquiring the old socket lock, sctp_wait_for_connect() returns success without noticing the migration — the caller then accesses the association under the wrong lock in sctp_datamsg_from_user(). Add the same sk != asoc->base.sk check that sctp_wait_for_sndbuf() already has, returning an error if the association was migrated while we slept.

• CWE-362
• CWE-362

• https://git.kernel.org/stable/c/0e0d5bc76fd4267a71334fcc8f1a5fbcf997845dPatch
• https://git.kernel.org/stable/c/6140cfa721451fa6e18e134e709703c2bf34d0fbPatch
• https://git.kernel.org/stable/c/634a9af8a26a84d8b0d7b3b643204b344b42d9fbPatch
• https://git.kernel.org/stable/c/68667ee4c7dadf7f63167234e2a1af09b3f7874ePatch
• https://git.kernel.org/stable/c/7d2038d4b80166f7bead8d07eba3b97405816c21Patch
• https://git.kernel.org/stable/c/8e9b56051d24540cfbf39194618708c4a7633549Patch
• https://git.kernel.org/stable/c/bcfeac79af740735ace44008b4a11b8e5add20f5Patch
• https://git.kernel.org/stable/c/f14fe6395a8b3d961a61e138ad7b36ba3626dd4ePatch

Published

Jul 19, 2026

Last Modified

Oct 19, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63966In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-63967In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-63968In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-63969In the Linux kernel, the following vulnerability has been re…
• CVE-2026-6397The Sticky plugin for WordPress is vulnerable to Stored Cros…6.4
• CVE-2026-63970In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-63972In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-63973In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-63974In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-63975In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-63976In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-63977In the Linux kernel, the following vulnerability has been re…7.8