What is the CVSS score of EUVD-2026-59662?

EUVD-2026-59662 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-59662?

CVE-2026-74469 affects the Linux kernel SCTP subsystem, enabling remote attackers to corrupt kernel memory and potentially achieve privilege escalation or service disruption across affected Linux…. A patch is available.

How to fix or mitigate EUVD-2026-59662?

Within 24 hours: Identify and flag all systems running Linux kernels prior to versions 6.6.151, 6.12.103, 6.18.44, 7.1.8, and 7.2-rc6, prioritizing SCTP-enabled and network-facing systems. Within 7 days: Begin staged kernel patching on non-production systems, upgrading to Linux 6.6.151, 6.12.103, 6.18.44, 7.1.8, or 7.2-rc6 or later. Within 30 days: Complete kernel updates across all production infrastructure, verify patched versions are deployed, and restore full SCTP service monitoring.

Linux Kernel EUVD-2026-59662

| CVE-2026-74469 HIGH

2026-08-15 Linux

GHSA-772m-42gr-vc4c

Buffer Overflow Linux Red Hat Suse

8.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.1 HIGH

AC:H reflects the 65,535-unique-peer precondition plus a sock_diag trigger; PR:N because SCTP association establishment requires no target-side credentials.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Red Hat

7.0 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 11:37 vuln.today

CVSS changed

Aug 17, 2026 - 06:22 NVD

8.8 (HIGH)

Patch available

Aug 15, 2026 - 13:04 EUVD

CVE Published

Aug 15, 2026 - 12:27 cve.org

HIGH 8.8

CVE Published

Aug 15, 2026 - 12:27 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

sctp: prevent peer transport count overflow

sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero.

SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in transport_addr_list. After the wrap, a diagnostic dump reserves an empty payload and writes 8 MiB of peer addresses past the skb tail.

Reject a new unique peer when transport_count has reached U16_MAX. Perform the check after the existing-peer lookup so a duplicate address continues to return its existing transport at the limit.

AnalysisAI

Integer overflow in the Linux kernel SCTP subsystem allows a remote low-privileged attacker to trigger an approximately 8 MiB out-of-bounds write past a socket buffer (skb) tail in kernel heap memory by adding 65,536 unique peer transport addresses to an SCTP association, wrapping the 16-bit transport_count to zero. Affected systems running Linux kernels from the 4.7 era through stable branches prior to 6.6.151, 6.12.103, 6.18.44, 7.1.8, and 7.2-rc6 are vulnerable. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon

Establish SCTP association with target

Delivery

Add 65,535 unique peer transport addresses

Exploit

transport_count 16-bit overflow wraps to zero

Install

Trigger sock_diag INET_DIAG_PEERS diagnostic dump

Zero-length skb payload allocated

Execute

8 MiB written past skb tail

Impact

Kernel heap corruption enabling crash or privilege escalation

Recon

Establish SCTP association with target

Delivery

Add 65,535 unique peer transport addresses

Exploit

transport_count 16-bit overflow wraps to zero

Install

Trigger sock_diag INET_DIAG_PEERS diagnostic dump

Zero-length skb payload allocated

Execute

8 MiB written past skb tail

Impact

Kernel heap corruption enabling crash or privilege escalation

Vulnerability AssessmentAI

Exploitation	The SCTP kernel module must be loaded and the target must accept SCTP connections from the attacker's network. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 score of 8.8 (High) reflects network accessibility, low complexity, and high C/I/A impact, but real-world exploitation risk is materially lower than this rating implies. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	A remote attacker with network-level access to a target exposing SCTP services establishes an association and repeatedly sends SCTP address-management messages adding 65,535 distinct peer transport addresses, wrapping the 16-bit transport_count to zero. When a local administrative user subsequently runs a diagnostic tool such as ss or a monitoring agent that invokes the INET_DIAG sock_diag interface, the kernel allocates a zero-length payload for INET_DIAG_PEERS but copies all 65,536 peer sockaddr_storage entries - approximately 8 MiB - past the socket buffer tail, corrupting adjacent kernel heap structures and potentially enabling a kernel panic or code execution at ring 0. …
Remediation	Upgrade to a patched Linux kernel: 6.6.151+ for the 6.6 longterm branch, 6.12.103+ for 6.12, 6.18.44+ for 6.18, 7.1.8+ for 7.1 stable, or 7.2-rc6+ for mainline. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Identify and flag all systems running Linux kernels prior to versions 6.6.151, 6.12.103, 6.18.44, 7.1.8, and 7.2-rc6, prioritizing SCTP-enabled and network-facing systems. …

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

EUVD-2026-59662 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-59662

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

Recommended ActionAI

Same technique Buffer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code