Search: CVE-2026-23125

A null pointer dereference vulnerability was found in the SCTP transmit path of the Linux kernel when SCTP-AUTH key initialization fails during INIT_ACK processing. The issue arises because the command sequence allows a DATA chunk with authentication enabled but a NULL shared key to be queued and transmitted, potentially causing a kernel crash. The fix involves reordering commands to ensure that if shared key generation fails, authenticated DATA cannot be sent and timers behave correctly.