Search: CVE-2026-46227

CVE-2026-46227 is a race condition vulnerability in the Linux kernel's SCTP implementation affecting version 4.17. It arises from improper revalidation of a cached list cursor after temporarily dropping the socket lock during SCTP_SENDALL operations. This can lead to use-after-free or type confusion, potentially allowing local attackers to cause kernel memory corruption or arbitrary code execution. The flaw requires local unprivileged access to SCTP socket operations, with network abort traffic possibly contributing to the attack. The issue has been fixed in multiple subsequent kernel commits.