CVE-2026-68379

Summary

In the Linux kernel, the following vulnerability has been resolved:

tcp: fix TIME_WAIT socket reference leak on PSP policy failure

Release the TIME_WAIT socket reference and jump to discard_it upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcp_tw_bucket structures.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux659a2899a57da59f433182eba571881884d6323e < e666af5dcc905ba694745963174d232deb478c55affected
LinuxLinux659a2899a57da59f433182eba571881884d6323e < 374742a961becbbfc7fbfd1382d978a05e492741affected
LinuxLinux659a2899a57da59f433182eba571881884d6323e < 2c1931a81122c3cdc4c89448fe0442c69e21c0d5affected
LinuxLinux6.18affected
LinuxLinux0 < 6.18unaffected
LinuxLinux6.18.42 <= 6.18.*unaffected
LinuxLinux7.1.6 <= 7.1.*unaffected
LinuxLinux7.2-rc4 <= *unaffected

Weaknesses

References