CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-68320: Linux 2.6.24

CVE-2026-68320. CVSS 3.1 base score 7.3 (HIGH, Source advisory). EPSS 0.00127 (percentile 0.02142), scored 15-Oct-2026.

Affected technology

Linux · 1f485649f52929d9937b346a920a522a7363e202 to before 3d22a7da2e264f407c729f33a0a346ff76108bc6, 1f485649f52929d9937b346a920a522a7363e202 to before 6837c1c19a259518974cbc5a52017646e3906564, 1f485649f52929d9937b346a920a522a7363e202 to before 54bb4c03fa17cdcb157c26c33e60a78cf32960f5, 1f485649f52929d9937b346a920a522a7363e202 to before 5a365f1e423444c5da7eb689a8661633dad43e48, 1f485649f52929d9937b346a920a522a7363e202 to before 886e28e14ab655012779016d251fef53d103aa12, 1f485649f52929d9937b346a920a522a7363e202 to before 11092d79eb2b7c0068382f72fc2416d1786bb2e0, 1f485649f52929d9937b346a920a522a7363e202 to before b6ea3dda09eb4d5caf7bbc00f857688cf9e98255, 1f485649f52929d9937b346a920a522a7363e202 to before ff04b26794a16a8a879eb4fd2c02c2d6b03850e9
Linux

Linux · 2.6.24
Linux

Component: Not specified by the source
File: net/sctp/auth.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality impact as low; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
29.2 /100 (P4)
CVSS 3.1
7.3 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H · Source advisory
EPSS
0.00127 · percentile 0.02142 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-68320.html