CVE-2026-98078
Received Received - Intake

IPVS Sequence Option Serialization Memory Disclosure

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization hton_seq() expects the host-order source first and the unaligned network-order destination second. The version 1 sync sender passes these arguments in reverse for both sequence blocks. This leaves 24 bytes of the kmalloc-backed message unwritten. It may disclose stale heap data and replace the live connection sequence state with values read from the buffer. Pass the connection sequence state as the source and the message payload as the destination for both blocks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98078
EUVD
EUVD-2026-86908

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves incorrect serialization of sequence options in the IP Virtual Server (IPVS) subsystem. The hton_seq() function expects the source in host order and destination in network order, but the version 1 sync sender reverses these arguments for sequence blocks. This leaves 24 bytes of heap data unwritten, potentially exposing stale memory or corrupting live connection state.

Detection Guidance

This vulnerability affects the Linux kernel's IPVS (IP Virtual Server) module, specifically in sequence option serialization. Detection requires checking kernel versions and IPVS configurations. No direct commands are provided in the context, but monitoring for unusual network traffic patterns or kernel logs related to IPVS may help. Review kernel logs for errors or warnings about IPVS or sequence handling.

Impact Analysis

This flaw may allow disclosure of sensitive kernel memory or corruption of connection tracking state. Attackers could exploit it to read uninitialized memory, leading to information leaks, or manipulate connection sequences, causing service disruptions or bypassing security controls.

Mitigation Strategies

Apply the latest kernel patches or updates that address this issue. If using a vulnerable kernel version, disable IPVS or restrict its use until patched. Monitor network traffic for anomalies and review kernel logs for sequence-related errors. Ensure firewalls or network security tools are updated to detect potential exploits.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98078. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart