CVE-2026-68118

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the tcp check req() function within the SYN-RECEIVED request-socket path. The system accepts an in-window RST (Reset) packet without requiring the SEG.SEQ variable to exactly match the RCV.NXT variable. Consequently, a non-exact RST removes the request instead of triggering a challenge ACK, which deviates from RFC 9293 and RFC 5961 standards. According to these standards, an exact RST should reset the connection, while a non-exact in-window RST must be dropped and trigger a challenge ACK.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.