CVE-2026-63913 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check

🗓️ 19 Jul 2026 14:55:17Reported by GoogleType

osv🔗 osv.dev👁 3 Views

CVE-2026-63913 fixes TCP conntrack where invalid-sequence reset could force CLOSE; only a valid SYN reply in the correct direction closes.

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2026-63913	19 Jul 202614:55	–	cve
Cvelist	CVE-2026-63913 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check	19 Jul 202614:55	–	cvelist
EUVD	EUVD-2026-45686	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63913	19 Jul 202616:17	–	nvd
OSV	DEBIAN-CVE-2026-63913	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63913	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61230	19 Jul 202600:00	–	ptsecurity

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/2006979a15af5404bf932a325357683c0bac1656
git	www.git.kernel.org/stable/c/2bb6d82b586ea5a4cb73bbdd6b7432e96096bc77
git	www.git.kernel.org/stable/c/6476c17d536dbd321c073242e762ddb2713a1238
git	www.git.kernel.org/stable/c/b98ab51c45c5608a1c19ce7fd17a3032469bb83f
git	www.git.kernel.org/stable/c/bed6e04be8e6b9133d8b16d5a42d0e0ce674fa9a
git	www.git.kernel.org/stable/c/d67c6adee8d1b65330d0174c4c367faba14e80a8
git	www.git.kernel.org/stable/c/f206def4e86d810f927ba1d8e322ea72b29bce58
git	www.git.kernel.org/stable/c/f5547bebc416d56f56fb5b86dc20aabfa42165a0
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63913.json

20 Jul 2026 03:47Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.18.2

EPSS0.00227