CVE-2026-68119

The CVE concerns the Linux kernel TCP-AO handling where tcp_v4_send_ack() and tcp_v6_send_response() build standalone TCP-AO responses. The TCP header length for the option is rounded to a four-byte boundary, but tcp_ao_hash_hdr() writes only the MAC; if the MAC length is not four-byte aligned, 1...