Skip to content
Heist/ feed
Unrated

ipvs: reject invalid states in connection template sync records

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template state range and still store the value in the connection. A template can be returned by ordinary connection lookup. TCP and SCTP then use the invalid state as an index into their transition tables. Reject invalid template states in both sync protocol versions before looking up or modifying a connection. The version 1 path handles both IPv4 and IPv6 records.

Announced Source revision 1
Original source ↗

CVE-2026-97596

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-97596

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "275411430f892407b885be1de2548b2e632892c3",
        "lessThan": "5677e81ffdbfc1c03dcb427fb8b1c38289bed76d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "275411430f892407b885be1de2548b2e632892c3",
        "lessThan": "d4eb339b442a0ffaa565779b975494a0a0664f18",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "275411430f892407b885be1de2548b2e632892c3",
        "lessThan": "1a8f15911352bb3cf4663aa02049c49c7f30e524",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "275411430f892407b885be1de2548b2e632892c3",
        "lessThan": "652d9caa5ac925ab012834e325d77b9ed638d4fc",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "275411430f892407b885be1de2548b2e632892c3",
        "lessThan": "fc10dc4511e6e2e2b4098ee115c8e5639471f23d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "275411430f892407b885be1de2548b2e632892c3",
        "lessThan": "50c3f06222eafe9cca7ca51a0ef83311d7cab353",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "275411430f892407b885be1de2548b2e632892c3",
        "lessThan": "0c61f7d8e18a978aec2a16d9acd5f682f1c72476",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "275411430f892407b885be1de2548b2e632892c3",
        "lessThan": "74cb39735b6cd0aff4b5584158f09376fd97aadf",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/netfilter/ipvs/ip_vs_sync.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.19"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.19",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.10.271",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.222",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.189",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.158",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.111",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.53",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.2.7",
        "versionType": "semver",
        "lessThanOrEqual": "7.2.*"
      },
      {
        "status": "unaffected",
        "version": "7.3",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/netfilter/ipvs/ip_vs_sync.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-97596

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#38038 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement