Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-68379

tcp: fix TIME_WAIT socket reference leak on PSP policy failure

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIME_WAIT socket reference leak on PSP policy failure Release the TIME_WAIT socket reference and jump to discard_it upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcp_tw_bucket structures.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 659a2899a57da59f433182eba571881884d6323e to < e666af5dcc905ba694745963174d232deb478c55affected
  • 659a2899a57da59f433182eba571881884d6323e to < 374742a961becbbfc7fbfd1382d978a05e492741affected
  • 659a2899a57da59f433182eba571881884d6323e to < 2c1931a81122c3cdc4c89448fe0442c69e21c0d5affected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References