ipvs: fix more places with wrong ipv6 transport offsets
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause problems with apps over IPv6. As for the only official app in the kernel tree (FTP) this problem is harmless because we use Netfilter to mangle the FTP ports and we do not adjust the TCP seq numbers. Also, provide correct offset of the ICMPV6 header in ip_vs_out_icmp_v6() for correct checksum checks when the IPv6 packet has extension headers.
CVE-2026-68477
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-68477
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "2a3b791e6e1169f374224d164738e9f7be703d77",
"lessThan": "613ce63711b8d431bba90781f133c39a21684f87",
"versionType": "git"
},
{
"status": "affected",
"version": "2a3b791e6e1169f374224d164738e9f7be703d77",
"lessThan": "95d4511d81b2b37e5d2bdde5d912e48243eae517",
"versionType": "git"
},
{
"status": "affected",
"version": "2a3b791e6e1169f374224d164738e9f7be703d77",
"lessThan": "3a9dc9b55b53d94613a587604b77d3b20024090c",
"versionType": "git"
},
{
"status": "affected",
"version": "2a3b791e6e1169f374224d164738e9f7be703d77",
"lessThan": "a3f0d5b605cd5da5c95279969fb8cea4e55cee5b",
"versionType": "git"
},
{
"status": "affected",
"version": "2a3b791e6e1169f374224d164738e9f7be703d77",
"lessThan": "7350eb7ead172ae8024897d4b0f2e15c5318279c",
"versionType": "git"
},
{
"status": "affected",
"version": "2a3b791e6e1169f374224d164738e9f7be703d77",
"lessThan": "d4ec18f48ce78a3bf7c999ac908691007375fe99",
"versionType": "git"
},
{
"status": "affected",
"version": "2a3b791e6e1169f374224d164738e9f7be703d77",
"lessThan": "905d7a363ade96a19f214815361e11981142c547",
"versionType": "git"
},
{
"status": "affected",
"version": "2a3b791e6e1169f374224d164738e9f7be703d77",
"lessThan": "b3fe4cbd583895987935a9bdad01c8f9d3a02310",
"versionType": "git"
}
],
"programFiles": [
"net/netfilter/ipvs/ip_vs_app.c",
"net/netfilter/ipvs/ip_vs_core.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "2.6.28"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "2.6.28",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.261",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.212",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.178",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.145",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.97",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.40",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.1.5",
"versionType": "semver",
"lessThanOrEqual": "7.1.*"
},
{
"status": "unaffected",
"version": "7.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"net/netfilter/ipvs/ip_vs_app.c",
"net/netfilter/ipvs/ip_vs_core.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-68477
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #41734 · Revision 1
- Added to Heist Feed
- Publisher date