Skip to content
Heist/ feed
Critical

ipvs: fix more places with wrong ipv6 transport offsets

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause problems with apps over IPv6. As for the only official app in the kernel tree (FTP) this problem is harmless because we use Netfilter to mangle the FTP ports and we do not adjust the TCP seq numbers. Also, provide correct offset of the ICMPV6 header in ip_vs_out_icmp_v6() for correct checksum checks when the IPv6 packet has extension headers.

Announced Source revision 1
Original source ↗

CVE-2026-68477

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-68477

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "2a3b791e6e1169f374224d164738e9f7be703d77",
        "lessThan": "613ce63711b8d431bba90781f133c39a21684f87",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "2a3b791e6e1169f374224d164738e9f7be703d77",
        "lessThan": "95d4511d81b2b37e5d2bdde5d912e48243eae517",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "2a3b791e6e1169f374224d164738e9f7be703d77",
        "lessThan": "3a9dc9b55b53d94613a587604b77d3b20024090c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "2a3b791e6e1169f374224d164738e9f7be703d77",
        "lessThan": "a3f0d5b605cd5da5c95279969fb8cea4e55cee5b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "2a3b791e6e1169f374224d164738e9f7be703d77",
        "lessThan": "7350eb7ead172ae8024897d4b0f2e15c5318279c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "2a3b791e6e1169f374224d164738e9f7be703d77",
        "lessThan": "d4ec18f48ce78a3bf7c999ac908691007375fe99",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "2a3b791e6e1169f374224d164738e9f7be703d77",
        "lessThan": "905d7a363ade96a19f214815361e11981142c547",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "2a3b791e6e1169f374224d164738e9f7be703d77",
        "lessThan": "b3fe4cbd583895987935a9bdad01c8f9d3a02310",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/netfilter/ipvs/ip_vs_app.c",
      "net/netfilter/ipvs/ip_vs_core.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "2.6.28"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "2.6.28",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.10.261",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.212",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.178",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.145",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.97",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.40",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.1.5",
        "versionType": "semver",
        "lessThanOrEqual": "7.1.*"
      },
      {
        "status": "unaffected",
        "version": "7.2",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/netfilter/ipvs/ip_vs_app.c",
      "net/netfilter/ipvs/ip_vs_core.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-68477

Source reference: /cveMetadata/cveId

Publisher severity

critical

Source reference: /containers/cna/metrics

Event
#41734 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement