CVE-2026-74747
Received Received - Intake

IPVS Out-of-Bounds Access in Linux Kernel

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent out-of-bounds access. One such place reported by Sashiko is ip_vs_nat_icmp() where local process can change the ihl field and after skb_ensure_writable() we can see larger value which is a problem for the ip_send_check(cih) calls. Add check to drop the packet if the ihl field is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-74747
EUVD
EUVD-2026-66577

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves an out-of-bounds access issue in the IP Virtual Server (IPVS) code. The problem occurs when processing embedded IP headers in network packets. The outer IP header is pulled into the socket buffer head, but embedded headers must be revalidated after reading from the socket buffer fragments to prevent out-of-bounds memory access.

Detection Guidance

This vulnerability involves an out-of-bounds access in the Linux kernel's IPVS (IP Virtual Server) module due to improper validation of the IP header length (ihl) field. Detection requires checking kernel logs for related errors or monitoring network traffic for malformed packets targeting IPVS functionality.

Impact Analysis

This vulnerability could allow a local attacker to cause a denial of service by triggering an out-of-bounds memory access. This might lead to kernel crashes or system instability. It does not appear to allow remote code execution or data theft based on the provided details.

Mitigation Strategies

Apply the latest Linux kernel security patches to address the ihl validation issue in IPVS. Monitor network traffic for suspicious packets and update CPEs (linux linux_kernel) to the patched versions. Restart services using IPVS after patching.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74747. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart