Out-of-Bounds Write Vulnerability in Linux Kernel's IPVS Processing

CVE-2026-74724

What is CVE-2026-74724?

A vulnerability in the Linux kernel's IP Virtual Server (IPVS) module allows local attackers to exploit out-of-bounds write capabilities. This issue stems from multiple reads of the IP header length (ihl) field, which can lead to unsafe memory access during packet processing. Specifically, in the ip_vs_nat_icmp function, improper handling of packet data can result in writing beyond intended memory boundaries. The solution involves utilizing the ciph argument similar to IPv6 implementations and ensuring that the ihl field is read a single time to prevent memory corruption.

References