EUVD-2026-71651

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the checksum for ICMP packets only when we mangle the packets on MASQ or o...

CVE-2026-80901

Linux kernel IPVS (IP Virtual Server) contains a flaw in checksum validation for ICMPv6 traffic. Specifically, ip_vs_in_icmp_v6() was missing checksum validation for ICMPv6 packets from clients, and handle_response_icmp() was missing the pseudo-header calculation when validating ICMPv6 messages f...

CVE-2026-80875

In the Linux kernel , the IPVS (IP Virtual Server) subsystem contained a bug in TCP state lookup for IPv6 packets. The code reparsed the socket buffer to locate the TCP header using a fixed offset of sizeof(struct ipv6hdr), rather than the already-computed transport-header offset stored in iph.le...

EUVD-2026-71505

In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...

CVE-2026-80714

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

AZL-98105 CVE-2026-80714 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714 ipvs: do not propagate one-packet flag to synced conns

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

EUVD-2026-67449

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

CVE-2026-80714 is a use-after-free in the Linux kernel's IPVS (IP Virtual Server) subsystem. The root cause is that ip_vs_bind_dest() propagates the IP_VS_CONN_F_ONE_PACKET flag from a destination to a synced connection that is already hashed. During expiry, the kernel then treats the synced conn...

CVE-2026-80714 ipvs: do not propagate one-packet flag to synced conns

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

Linux Distros Unpatched Vulnerability : CVE-2026-80714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added,...

PT-2026-83014

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ipvs module where synced connections may incorrectly inherit the IP VS CONN F ONE PACKET flag during the ip vs bind dest function execution. This occurs when a...

CVE-2026-74747

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. A local attacker can manipulate the IP Header Length ihl field within network packets. This manipulation can lead to an out-of-bounds access when the kernel attempts to revalidate embedded headers, potentially causing system...

EUVD-2026-66577

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

AZL-97830 CVE-2026-74747 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

UBUNTU-CVE-2026-74747

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

CVE-2026-74747 ipvs: revalidate ihl to prevent out-of-bounds access

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...