CVE-2026-68379: tcp: fix TIME_WAIT socket reference leak on PSP policy failure
Published Aug 10, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
tcp: fix TIMEWAIT socket reference leak on PSP policy failure
Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket structures.
Affected Software
1 affected component
Linux Linux kernel
Event History
Aug 10, 2026
CVE Published
via MITRE·12:03 PM
Data Sourced
via MITRE·12:03 PM
Description
Data Sourced
via NVD·01:20 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-68379?
CVE-2026-68379 has a severity score of 15.
2
How do I fix CVE-2026-68379?
To fix CVE-2026-68379, ensure that you update your Linux kernel to the latest version that includes the patch for this vulnerability.
3
What systems are affected by CVE-2026-68379?
CVE-2026-68379 affects systems running vulnerable versions of the Linux kernel.
4
Does CVE-2026-68379 affect both IPv4 and IPv6?
Yes, CVE-2026-68379 affects both IPv4 and IPv6 receive paths.
5
What is the consequence of CVE-2026-68379?
The consequence of CVE-2026-68379 is a potential memory leak due to a reference leak of TIME_WAIT sockets.