# CVE-2026-68119: linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: initialize standalone TCP-AO response paddi...

CVE-2026-68119 is fixed in 37 products on 1 platform, first by DEBIAN-CVE-2026-68119, released August 11, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-68119
- Priority: High
- CVSS: 7.5 (high)
- EPSS: 0.0037
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 10, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:  tcp: initialize standalone TCP-AO response padding  tcp_v4_send_ack() and tcp_v6_send_response() construct standalone TCP responses with TCP-AO options.  The option length carries the actual MAC length, but the TCP header length includes the option rounded up to a four-byte boundary.  tcp_ao_hash_hdr() writes the MAC only.  Thus, when the MAC length is not four-byte aligned, the one to three bytes after the MAC are left uninitialized and may be transmitted.  For the normal TCP-AO hashing mode, those bytes also have to be initialized before computing the MAC.  Initialize only the alignment padding in the TCP-AO branches, before hashing the header.  Use TCPOPT_NOP, as in the normal TCP-AO output path. This avoids adding work to non-AO TCP responses while preserving a valid authenticated header.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | kernel-uek ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-core ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-core ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-core ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-core ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-devel ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-devel ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-core ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-core ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-deprecated ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-deprecated ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-desktop ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-desktop ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-extra ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-extra ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-extra-netfilter ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-extra-netfilter ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-usb ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-usb ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-wireless ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-debug-modules-wireless ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-devel ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-devel ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-doc ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-doc ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-core ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-core ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-deprecated ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-deprecated ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-desktop ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-desktop ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-extra ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-extra ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-extra-netfilter ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-extra-netfilter ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-usb ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-usb ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-wireless ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-modules-wireless ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-tools ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek-tools ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-core ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-core ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-devel ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-devel ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-core ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-core ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-deprecated ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-deprecated ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-desktop ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-desktop ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-extra ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-extra ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-extra-netfilter ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-extra-netfilter ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-usb ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-usb ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-wireless ol 10 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | kernel-uek64k-modules-wireless ol 9 | 0:6.12.0-206.104.3.3.el9uek | [ELSA-2026-500248](https://patchblox.com/security/data/fix/linux/elsa-2026-500248.md) | Sep 4, 2026 |
| Linux | linux Debian 13.5 (trixie) | 6.12.101-1 | [DEBIAN-CVE-2026-68119](https://patchblox.com/security/data/fix/linux/debian-cve-2026-68119.md) | Aug 11, 2026 |
| Linux | linux Debian 14 | 7.1.6-1 | [DEBIAN-CVE-2026-68119](https://patchblox.com/security/data/fix/linux/debian-cve-2026-68119.md) | Aug 11, 2026 |
| Linux | linux-6.12 Debian 12.15 (bookworm) | 6.12.101-1~deb12u1 | [DEBIAN-CVE-2026-68119](https://patchblox.com/security/data/fix/linux/debian-cve-2026-68119.md) | Aug 11, 2026 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.