CVE-2026-68379 PUBLISHED

tcp: fix TIME_WAIT socket reference leak on PSP policy failure

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

tcp: fix TIME_WAIT socket reference leak on PSP policy failure

Release the TIME_WAIT socket reference and jump to discard_it upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcp_tw_bucket structures.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 659a2899a57da59f433182eba571881884d6323e to e666af5dcc905ba694745963174d232deb478c55 (excl.)
  • affected from 659a2899a57da59f433182eba571881884d6323e to 374742a961becbbfc7fbfd1382d978a05e492741 (excl.)
  • affected from 659a2899a57da59f433182eba571881884d6323e to 2c1931a81122c3cdc4c89448fe0442c69e21c0d5 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.18 is affected
  • unaffected from 0 to 6.18 (excl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc4 to * (incl.)

References