CVE-2026-72330

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the tls sw read sock() function where the system fails to properly handle zero-length TLS application data records, which are permitted in TLS 1.3 as a countermeasure against traffic analysis. When such a record is decrypted and has a full len of 0, it is passed to the read actor. Because there is no payload to consume, the function returns zero, which the system interprets as backpressure. This causes the socket buffer (skb) to be requeued at the head of the rx list and stops processing. Subsequent calls continue to dequeue and requeue the same empty record, effectively blocking all following records on the connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.