Linux Kernel SCTP Flaw CVE-2026-64564 Scores 9.8: Your Server Does Not Use SCTP, but Any User Can Load It CVE-2026-64564 is a 9.8 kernel flaw in SCTP. On my Ubuntu server the module was not loaded, yet an ordinary user could load it. Real output, the block rule from Ubuntu, and where my own fix is incomplete. Oct 23, 2026 7 min read Security