Linux Kernel Vulnerability in IPVS Service Scheduler

CVE-2026-53270

What is CVE-2026-53270?

A vulnerability in the Linux kernel's IPVS module arises from improper management of service scheduler pointers during the updating process. When unbinding the old scheduler, the pointer to the scheduler is cleared post-invocation of RCU callbacks, leading to potential packet processing using the outdated scheduler. This issue is addressed by ensuring the scheduler pointer is cleared early in the unbind process, minimizing the risk of utilizing freed data. Additionally, the fix includes a mechanism to restore the prior scheduler upon initialization failure of a new scheduler, enhancing stability and functionality.

References