Linux Kernel SCTP Subsystem Vulnerability Allows Local Information Disclosure
A race condition in the Linux Kernel's SCTP subsystem allows local attackers to disclose sensitive information, requiring prior low-privileged code execution.
A race condition vulnerability has been identified within the Stream Control Transmission Protocol (SCTP) subsystem of the Linux Kernel, enabling local attackers to potentially disclose sensitive information. The vulnerability, tracked as CVE-2026-46227, requires an attacker to first gain the ability to execute low-privileged code on the target system before exploitation is possible.
The specific flaw lies in how the kernel handles message buffer initializations. Researchers at Zero Day Initiative (ZDI) discovered that the subsystem lacks proper locking mechanisms when performing operations on certain objects. This absence of adequate synchronization can lead to a race condition, where the timing of operations can be manipulated to reveal unintended data.
While the vulnerability itself is classified as an information disclosure, its exploitation could be chained with other vulnerabilities. Successful exploitation might allow an attacker to leverage this flaw in conjunction with other weaknesses to potentially execute arbitrary code within the context of the kernel, significantly escalating the potential impact.
Zero Day Initiative has assigned this vulnerability a CVSS score of 6.4, categorizing it as medium-high severity. The disclosure timeline indicates that the vulnerability was reported to the vendor on June 10, 2026, and a coordinated public release of the advisory occurred on September 14, 2026. The advisory was also updated on the same day.
Linux has since issued an update to address this vulnerability. Developers can find the specific fix in the Linux kernel source code repository at https://github.com/torvalds/linux/commit/abb5f36771cc4c05899b34000829a787572a8817.
The vulnerability was discovered and reported by Nico Yip, who is credited for their work on identifying this flaw. This disclosure highlights the ongoing challenges in securing complex kernel subsystems, where subtle race conditions can lead to significant security implications.
Users and administrators of Linux systems are strongly advised to apply the available patches as soon as possible to mitigate the risk of exploitation. Keeping systems updated is a critical defense against such vulnerabilities, especially those that allow for information disclosure and potential privilege escalation.