PT-2026-85794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPVS IP Virtual Server component where TCP state handling incorrectly reparses the socket buffer skb to locate the TCP header. For IPv6, the system uses a fixed si...

CVE-2026-80901: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the checksum for ICMP packets only when we mangle the packets on MASQ or o...

Linux Distros Unpatched Vulnerability : CVE-2026-80901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the...

CVE-2026-80875: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...

PT-2026-86192

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the IPVS IP Virtual Server component where checksum validations are missing or incorrect for certain packet types. Specifically, the ip vs in icmp v6 function fails to...

SUSE CVE-2026-74747

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

CVE-2026-80714

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

SUSE CVE-2026-74670

In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and tick limits until its initial calculation phase completes. If network namespace teardown clears ipvs-enable during that phase,...

SUSE CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

AZL-98105 CVE-2026-80714 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714 ipvs: do not propagate one-packet flag to synced conns

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

EUVD-2026-67449

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

CVE-2026-80714 is a use-after-free in the Linux kernel's IPVS (IP Virtual Server) subsystem. The root cause is that ip_vs_bind_dest() propagates the IP_VS_CONN_F_ONE_PACKET flag from a destination to a synced connection that is already hashed. During expiry, the kernel then treats the synced conn...

CVE-2026-80714 ipvs: do not propagate one-packet flag to synced conns

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

Linux Distros Unpatched Vulnerability : CVE-2026-80714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added,...

CVE-2026-74747

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. A local attacker can manipulate the IP Header Length ihl field within network packets. This manipulation can lead to an out-of-bounds access when the kernel attempts to revalidate embedded headers, potentially causing system...