RHSA-2026:85773: CVEs fixed (Red Hat)
RHSA-2026:85773 fixes 3 tracked CVEs. Affected systems and fixed versions.
- CVE-2026-74752 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before u
- CVE-2026-89479 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its a
- CVE-2026-74588 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in step with
Applies to
- RHEL 8 · fixed in kernel-4.18.0-553.176.1.el8_10