sctp: validate embedded address parameter length

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-74287 · Microsoft / collected KEV context

cve-program · CVE-2026-74287

• https://git.kernel.org/stable/c/06c8bf48505f2fef265931db82d5003d302a347b
• https://git.kernel.org/stable/c/28ba1d3c956604a89168adfb4c97cfc6c509bba5
• https://git.kernel.org/stable/c/3a44b2602d57e11e2eb85958d4cd500d14a27d9e
• https://git.kernel.org/stable/c/85f54cf589163a75fa06e37d8c2a4a72824c6dd1
• https://git.kernel.org/stable/c/92e4adfee56f32a963ebb105c6cd9a1ed707262a
• https://git.kernel.org/stable/c/ed8605c6f39b9b84f9a4631db6deb25e7f1e973c
• https://git.kernel.org/stable/c/0c674b20c9cdb54f8a46c88b4d00cadf82b8f0c0
• https://git.kernel.org/stable/c/e9361d0ca55c4af12aac09e2572852fa91046229

No related operational record is retained in the current change model.