CVE-2026-68379
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
In the Linux kernel, a TIME_WAIT socket reference leak was found on PSP policy failure in IPv4 and IPv6 receive paths. The missing release leads to memory leak of tcp_tw_bucket structures.
Risk Assessment
The organization may experience gradual kernel memory exhaustion, potentially leading to system instability or network service failures.
Recommendation
Apply the official Linux kernel patch that fixes this issue as soon as possible, and monitor for memory leak messages.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIME_WAIT socket reference leak on PSP policy failure Release the TIME_WAIT socket reference and jump to discard_it upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcp_tw_bucket structures.