CVE-2026-74724

A flaw was found in the Linux kernel's IPVS IP Virtual Server component. A local attacker can exploit this vulnerability by manipulating packets processed by IPVS, specifically within the ipvsnaticmp function. This manipulation can lead to an out-of-bounds write due to improper handling of the IP...

CVE-2026-74670

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. During the initial setup of the IPVS estimator, if the network namespace is removed, the estimator may continue operating with uninitialized limits. This can lead to an out-of-bounds write when processing network statistics,...

CVE-2026-74669

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...