CVE-2026-72330

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tlsswreadsock A peer may send a zero-length TLS applicationdata record; TLS 1.3 explicitly permits these as a traffic-analysis countermeasure RFC 8446, Section 5.1. After decryption such a...

CVE-2026-72330

CVE-2026-72330 (Linux kernel): The vulnerability concerns net/tls processing of TLS application_data records. A peer can send a zero-length TLS record (per RFC 8446, Section 5.1); after decryption the record has full_len == 0 and may cause the read path to backpressure and stall, blocking subsequ...