syn cookies

  1. Linux TCP Hardening for CVE-2026-23247: Restoring Port-Based Entropy

    Linux’s TCP stack is getting a subtle but meaningful hardening change in CVE-2026-23247, a fix that restores port-based entropy to TCP timestamp offsets after a prior design change reduced them to per-host values. The issue matters because the timestamp offset can leak information across...