CVE-2026-68119

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the construction of standalone TCP responses using TCP-AO (TCP Authentication Option) options. The functions tcp v4 send ack() and tcp v6 send response() create responses where the TCP header length is rounded up to a four-byte boundary, but the tcp ao hash hdr() function only writes the Message Authentication Code (MAC). Consequently, if the MAC length is not four-byte aligned, one to three bytes of padding remain uninitialized and may be transmitted. In normal TCP-AO hashing mode, these bytes must be initialized before the MAC is computed to ensure a valid authenticated header.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.