CVE-2026-68476

🗓️ 15 Aug 2026 05:51:32Reported by LinuxType

Linux kernel ipvs in __ip_vs_get_out_rt() dereferences stale ip header pointer after skb head reallocation causing memory corruption and DoS.

Reporter	Title	Published	Views	Family All 14
Tenable Nessus	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2057)	18 Aug 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2071)	31 Aug 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	12 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-68476	15 Aug 202600:00	–	nessus
Circl	CVE-2026-68476	17 Aug 202606:30	–	circl
Cvelist	CVE-2026-68476 ipvs: reload ip header after head reallocation	15 Aug 202605:51	–	cvelist
Debian CVE	CVE-2026-68476	15 Aug 202605:51	–	debiancve
EUVD	EUVD-2026-59098	15 Aug 202605:51	–	euvd
NVD	CVE-2026-68476	15 Aug 202606:20	–	nvd
OSV	BELL-CVE-2026-68476	18 Aug 202606:06	–	osv

Vulners

CNA

Node

linux linux_kernelRange4.10–5.10.269

linux linux_kernelRange5.11.0–5.15.220

linux linux_kernelRange5.16.0–6.1.187

linux linux_kernelRange6.2.0–6.6.145

linux linux_kernelRange6.7.0–6.12.97

linux linux_kernelRange6.13.0–6.18.40

linux linux_kernelRange6.19.0–7.1.5

linux linux_kernelRange7.2.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/ipvs/ip_vs_xmit.c"
    ],
    "versions": [
      {
        "version": "8d8e20e2d7bba8c50e64e0eca1cb83956f468e49",
        "lessThan": "4f2d1151421520d7ae16ca8d367d0ca09f5dfbd7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d8e20e2d7bba8c50e64e0eca1cb83956f468e49",
        "lessThan": "657118cad620172dfd8f6ed5717fd75c0d1f7a5a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d8e20e2d7bba8c50e64e0eca1cb83956f468e49",
        "lessThan": "a10f5080afbed242640f2984328de25f84557da1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d8e20e2d7bba8c50e64e0eca1cb83956f468e49",
        "lessThan": "ac6ac3d35bfc0ade9d17d354c84e503a946ebdab",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d8e20e2d7bba8c50e64e0eca1cb83956f468e49",
        "lessThan": "e51687fc56c2e39ea6e9532925f1aabd4d529f61",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d8e20e2d7bba8c50e64e0eca1cb83956f468e49",
        "lessThan": "3fb7edd2018bb1ad0a68157383d9b9dac33dd645",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d8e20e2d7bba8c50e64e0eca1cb83956f468e49",
        "lessThan": "ad1e14710b360bda087ebf9fb82460eb5ef775de",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d8e20e2d7bba8c50e64e0eca1cb83956f468e49",
        "lessThan": "a2f57827bf7c695b8c72dc4511cae8e86582369d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/ipvs/ip_vs_xmit.c"
    ],
    "versions": [
      {
        "version": "4.10",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.10",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.269",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.220",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.187",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.145",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.97",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.40",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.5",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/657118cad620172dfd8f6ed5717fd75c0d1f7a5a
git	www.git.kernel.org/stable/c/4f2d1151421520d7ae16ca8d367d0ca09f5dfbd7
git	www.git.kernel.org/stable/c/3fb7edd2018bb1ad0a68157383d9b9dac33dd645
git	www.git.kernel.org/stable/c/e51687fc56c2e39ea6e9532925f1aabd4d529f61
git	www.git.kernel.org/stable/c/a2f57827bf7c695b8c72dc4511cae8e86582369d
git	www.git.kernel.org/stable/c/ad1e14710b360bda087ebf9fb82460eb5ef775de
git	www.git.kernel.org/stable/c/ac6ac3d35bfc0ade9d17d354c84e503a946ebdab
git	www.git.kernel.org/stable/c/a10f5080afbed242640f2984328de25f84557da1

02 Sep 2026 13:18Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.19.8

EPSS0.00695