SB20260824123 - Out-of-bounds write in Linux kernel netfilter ipvs

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260824123

SB20260824123 - Out-of-bounds write in Linux kernel netfilter ipvs

Published: August 24, 2026

Security Bulletin ID SB20260824123
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Out-of-bounds write (CVE-ID: CVE-2026-74670)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to an out-of-bounds write in the IPVS estimator logic in net/netfilter/ipvs/ip_vs_est.c when processing temporary estimators during network namespace teardown after IPVS is disabled. A local user can trigger estimator enqueue operations in this state to cause a denial of service.

The issue occurs when the initial calculation phase exits without installing positive chain and tick limits, allowing the estimator thread to continue with zero limit values.


Remediation

Install update from vendor's website.

References