CVE-2026-68476
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation __ip_vs_get_out_rt() calls skb_ensure_writable() which may reallocate skb->head.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-68476
EUVD
EUVD-2026-59098

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the IP Virtual Server (IPVS) subsystem. When __ip_vs_get_out_rt() calls skb_ensure_writable(), it may reallocate the skb->head buffer. This could lead to issues if the IP header is not properly reloaded after the reallocation, potentially causing memory corruption or undefined behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's IPVS (IP Virtual Server) module. Detection requires checking kernel logs for related errors or kernel crashes after network traffic processing. Commands like dmesg | grep -i ipvs or journalctl -k | grep -i ipvs may help identify issues.

Impact Analysis

This vulnerability could impact systems running vulnerable Linux kernels with IPVS enabled. Potential impacts include kernel crashes, denial of service, or unauthorized access if exploited. Systems using IPVS for load balancing or network services may be particularly affected.

Mitigation Strategies

Apply the latest Linux kernel patches or updates that address this issue. If immediate patching is not possible, consider disabling the IPVS module if it is not in use. Monitor kernel logs for signs of exploitation or instability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68476. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart