EUVD-2026-55499

In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcpcheckreq accepts an in-window RST without requiring SEG.SEQ to exactly match RCV.NXT. A non-exact RST therefore removes the request...

CVE-2026-68118

The CVE-2026-68118 entry concerns the Linux kernel TCP stack, specifically the SYN-RECEIVED path in tcp_check_req(). A non-exact in-window RST could be accepted without matching SEG.SEQ to RCV.NXT, potentially removing the request instead of triggering a challenge ACK. The fix enforces RFC 9293/5...