CVE-2026-98614
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
sctp: avoid livelock while updating retransmit path
In the Linux kernel, the following vulnerability has been resolved: sctp: avoid livelock while updating retransmit path sctp_assoc_update_retran_path() can loop forever when every remaining transport, including retran_path, is SCTP_UNCONFIRMED: the state check runs before the wraparound test, so the loop cannot observe that it has completed a full pass. Fix this by considering a transport only when it is not UNCONFIRMED, then checking whether the walk has returned to retran_path. This makes the full-pass termination independent of the transport state while preserving the existing fallback selection semantics. Also restore the NULL guard around the retran_path assignment. In the all-UNCONFIRMED case there is no eligible replacement transport, and installing NULL would leave later retransmit-path users and the debug print with a NULL path.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 | affected | git | 3fe624c3843694ab096fdb198526ba0c659febbe | Unavailable | None listed |
| 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 | affected | git | 43410c1f2db53516e95ddd7e5b4b02f495b78121 | Unavailable | None listed |
| 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 | affected | git | d893a7cc1cb41dd510f338bb2bfd8f29b14eaf49 | Unavailable | None listed |
| 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 | affected | git | 83b1a7f9e718828ef364a7b004254ebb2d0035fe | Unavailable | None listed |
| 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 | affected | git | 173610fff55022a5ad1579fbcc7faa97467b58b7 | Unavailable | None listed |
| 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 | affected | git | c9338057df1025f578fe7d0ff08bada87b8b838d | Unavailable | None listed |
| 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 | affected | git | ddc34cc0834c873871e88b055ee6a260676efe97 | Unavailable | None listed |
| 4c47af4d5eb2c2f78f886079a3920a7078a6f0a0 | affected | git | d2c31b837406395e576afeb25958c98e9938f3f6 | Unavailable | None listed |
| 8ceaec02b17397d12719a282945abc95f8149d9f | affected | git | Unavailable | Unavailable | None listed |
| d2c2bdcdd8c5ce3d2a68aa3353ed1f340c3e500e | affected | git | Unavailable | Unavailable | None listed |
| 3.10.106 | affected | semver | 3.11 | Unavailable | None listed |
| 3.12.71 | affected | semver | 3.13 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.14 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.14 | Unavailable | None listed |
| 5.10.271 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.222 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.189 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.158 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.112 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.55 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.9 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |