7.5

CVE-2026-68119: linux

CVSS: 7.5v3.1HighReceived
AliasesUBUNTU-CVE-2026-68119DEBIAN-CVE-2026-68119
Published 10-08-2026Last modified 17-08-2026
Open JSON

Vulnerability summary

CVE-2026-68119 is a high (CVSS 7.5) vulnerability in linux. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.8% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.37%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 9
MGASA-2026-0336MGASA-2026-0337USN-8886-1USN-8887-1USN-8887-2USN-8887-3

Timeline

  1. 10-08-2026
    PublishedVulnerability first disclosed.
  2. 17-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response padding tcp_v4_send_ack() and tcp_v6_send_response() construct standalone TCP responses with TCP-AO options. The option length carries the actual MAC length, but the TCP header length includes the option rounded up to a four-byte boundary. tcp_ao_hash_hdr() writes the MAC only. Thus, when the MAC length is not four-byte aligned, the one to three bytes after the MAC are left uninitialized and may be transmitted. For the normal TCP-AO hashing mode, those bytes also have to be initialized before computing the MAC. Initialize only the alignment padding in the TCP-AO branches, before hashing the header. Use TCPOPT_NOP, as in the normal TCP-AO output path. This avoids adding work to non-AO TCP responses while preserving a valid authenticated header.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.37%

Chance of exploitation in the next 30 days

Percentile

30%

Versus all other CVEs

30-day change

0.00 pp

From 0.37% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.37%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu142 products
  • linuxAll versions (No fix recorded) | < 6.8.0-147.147 | < 7.0.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1067.70 | < 7.0.0-1014.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.12.101-1 | < 7.1.6-1
  • linux-6.12< 6.12.101-1~deb12u1
Linux1 product
  • linux≥ decde2586b34b99684faff1eab41e5c496c27fb6, < bbb7db8c74b0b5d17a695136f0f0806ecd0118f6 | ≥ decde2586b34b99684faff1eab41e5c496c27fb6, < fadaff3f66e124c3a62237f9c881819a8ac90309 | ≥ decde2586b34b99684faff1eab41e5c496c27fb6, < a859b280441fb02f64ed4037f03d5c0c34a7a595 | ≥ decde2586b34b99684faff1eab41e5c496c27fb6, < e1a9d3cc11829c5414a75eb39c704f461936eb24 | 6.7

3 vendors · 145 products

References

16 links
Show all 16 references