CVE-2026-74724
Received Received - Intake

Out-of-Bounds Write in Linux Kernel IPVS

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ip_vs_nat_icmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such place is ip_vs_nat_icmp where we can write after the validated area. Fix it by providing ciph argument just like it is done for IPv6 and use ciph->len as offset to the embedded transport header. Modify some IPv4 header checks by reading the ihl field only once.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-74724
EUVD
EUVD-2026-64411

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves an out-of-bounds write issue in the IPVS (IP Virtual Server) component. A local attacker can modify packets during processing, leading to reading the IP header length field multiple times. This can cause out-of-bounds memory access, specifically in the ip_vs_nat_icmp function where writes occur beyond validated memory areas.

Detection Guidance

This vulnerability involves an out-of-bounds write in the Linux kernel's IPVS (IP Virtual Server) module. Detection requires checking for kernel logs or system crashes related to IPVS processing. Commands like dmesg | grep -i ipvs or journalctl -k | grep -i ipvs may help identify issues. Ensure your kernel version is updated to the patched release.

Impact Analysis

This vulnerability could allow a local attacker to execute arbitrary code or cause a denial-of-service condition by triggering memory corruption. It may lead to system crashes, data corruption, or unauthorized access depending on the attacker's goals and system configuration.

Mitigation Strategies

Immediately update your Linux kernel to the latest stable version that includes the fix for CVE-2026-74724. If updating is not possible, disable IPVS functionality temporarily by unloading the ip_vs module (rmmod ip_vs) or restricting access to IPVS services until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74724. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart