AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-68379

HIGH · CVSS 7.5 EPSS 0.61%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of TIME_WAIT sockets, where a reference leak occurs if the PSP policy check fails during packet reception for both IPv4 and IPv6. This can lead to increased memory consumption due to unfreed tcp_tw_bucket structures, potentially degrading system performance over time. Linux system administrators and developers should prioritize this fix to ensure optimal memory management and system stability.

CVE
CVE-2026-68379
Severity
HIGH
CVSS
7.5
EPSS
0.61%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIME_WAIT socket reference leak on PSP policy failure Release the TIME_WAIT socket reference and jump to discard_it upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcp_tw_bucket structures.