CVE-2026-80714

Received Received - Intake

IPVS Connection Flag Propagation Flaw in Linux Kernel

Publication date: 2026-08-28

Last updated on: 2026-08-29

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ip_vs_bind_dest() copies connection flags from the destination into cp->flags. IP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced connection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed, expiry can treat it as a one-packet connection and skip unlinking the existing conn_tab node, leaving stale hash nodes pointing at a freed struct ip_vs_conn. Drop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced connections.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-29

Generated

2026-09-18

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-80714

EUVD

EUVD-2026-67449

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the IP Virtual Server (IPVS) connection handling. When synced connections are created before their destination exists, flags from the destination are copied to the connection. If a synced connection inherits the one-packet flag while already hashed, it can cause the system to skip proper cleanup, leaving stale hash nodes that point to freed memory.

Detection Guidance

This vulnerability affects the Linux kernel's IPVS (IP Virtual Server) component. Detection requires checking kernel logs for IPVS-related errors or examining active IPVS connections for stale hash nodes. Use commands like 'dmesg | grep -i ipvs' to review kernel logs for IPVS errors. Check active IPVS connections with 'ipvsadm -L -n' and inspect connection flags for inconsistencies.

Impact Analysis

This vulnerability could lead to memory corruption or crashes in systems using IPVS for load balancing. Attackers might exploit this to cause denial-of-service conditions or execute arbitrary code with kernel privileges.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel networking issue that could lead to memory corruption or denial of service by leaving stale hash nodes. Compliance impacts would only occur if this vulnerability were exploited to cause data breaches or service disruptions in systems handling regulated data.

Mitigation Strategies

Immediately update the Linux kernel to a patched version that includes the fix for this vulnerability. Monitor IPVS connections after updating to ensure no stale hash nodes remain. Restart services using IPVS to clear existing connections if necessary.

Hi! I’m here to help you understand CVE-2026-80714. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70