9.8

CVE-2026-68477

ipvs: fix more places with wrong ipv6 transport offsets

In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix more places with wrong ipv6 transport offsets

Sashiko reports for more incorrect IPv6 transport offsets.

The app code for TCP was assuming IPv4 network header
even after the ipvsh argument was provided. This can
cause problems with apps over IPv6. As for the only
official app in the kernel tree (FTP) this problem is
harmless because we use Netfilter to mangle the FTP
ports and we do not adjust the TCP seq numbers.

Also, provide correct offset of the ICMPV6 header in
ip_vs_out_icmp_v6() for correct checksum checks when
the IPv6 packet has extension headers.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 2a3b791e6e1169f374224d164738e9f7be703d77
Version < 613ce63711b8d431bba90781f133c39a21684f87
Status affected
Version 2a3b791e6e1169f374224d164738e9f7be703d77
Version < 95d4511d81b2b37e5d2bdde5d912e48243eae517
Status affected
Version 2a3b791e6e1169f374224d164738e9f7be703d77
Version < 3a9dc9b55b53d94613a587604b77d3b20024090c
Status affected
Version 2a3b791e6e1169f374224d164738e9f7be703d77
Version < a3f0d5b605cd5da5c95279969fb8cea4e55cee5b
Status affected
Version 2a3b791e6e1169f374224d164738e9f7be703d77
Version < 7350eb7ead172ae8024897d4b0f2e15c5318279c
Status affected
Version 2a3b791e6e1169f374224d164738e9f7be703d77
Version < d4ec18f48ce78a3bf7c999ac908691007375fe99
Status affected
Version 2a3b791e6e1169f374224d164738e9f7be703d77
Version < 905d7a363ade96a19f214815361e11981142c547
Status affected
Version 2a3b791e6e1169f374224d164738e9f7be703d77
Version < b3fe4cbd583895987935a9bdad01c8f9d3a02310
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.28
Status affected
Version 0
Version < 2.6.28
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.503
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/613ce63711b8d431bba90781f133c39a21684f87
https://git.kernel.org/stable/c/95d4511d81b2b37e5d2bdde5d912e48243eae517
https://git.kernel.org/stable/c/3a9dc9b55b53d94613a587604b77d3b20024090c
https://git.kernel.org/stable/c/a3f0d5b605cd5da5c95279969fb8cea4e55cee5b
https://git.kernel.org/stable/c/7350eb7ead172ae8024897d4b0f2e15c5318279c
https://git.kernel.org/stable/c/d4ec18f48ce78a3bf7c999ac908691007375fe99
https://git.kernel.org/stable/c/905d7a363ade96a19f214815361e11981142c547
https://git.kernel.org/stable/c/b3fe4cbd583895987935a9bdad01c8f9d3a02310