THE page discusses a critical Linux kernel vulnerability identified as CVE-2026-68162, which affects the Stream Control Transmission Protocol (SCTP) networking code and has a CVSS score of 7.8. The flaw allows low-privileged users to escalate their privileges to root on versions of Ubuntu 26.04, with proof-of-concept exploit code made public by researchers. The vulnerability has not yet been actively exploited in the wild, but poses a significant risk as it provides complete control over affected systems.
The issue arises from a use-after-free flaw during network namespace teardown, specifically when sysctls are left writable after a socket is destroyed. The vulnerability, introduced in January 2025, was patched in July 2026, and users are urged to update their kernels as soon as possible.