https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 21:24:47 +0000 https://cve.radiocsirt.org/vuln/cve-2026-98255 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tcp: exclude old ACKs from tcp fast path</p> <p>Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT.</p> <p>Such ACKs will fall through to the slow path, where tcp_ack() performs the appropriate validation and challenge ACK handling according to RFC5961 and Commit 3d501dd326fb1c7 (&#34;tcp: do not accept ACK of bytes we never sent&#34;).</p> <p>This prevents old ACKs from being accepted or modifying connection state as part of the fast path before appropriate ACK validation is applied. In particular, this prevents payload carried by a segment with an excessively old ACK from advancing RCV.NXT before the ACK is rejected.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tcp: exclude old ACKs from tcp fast path</p> <p>Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT.</p> <p>Such ACKs will fall through to the slow path, where tcp_ack() performs the appropriate validation and challenge ACK handling according to RFC5961 and Commit 3d501dd326fb1c7 (&#34;tcp: do not accept ACK of bytes we never sent&#34;).</p> <p>This prevents old ACKs from being accepted or modifying connection state as part of the fast path before appropriate ACK validation is applied. In particular, this prevents payload carried by a segment with an excessively old ACK from advancing RCV.NXT before the ACK is rejected.</p> https://cve.radiocsirt.org/vuln/cve-2026-98255