Linux Kernel Vulnerability in IPVS Connection Management

CVE-2026-80714

What is CVE-2026-80714?

A vulnerability in the Linux kernel's IP Virtual Server (IPVS) module could allow synced connections to improperly inherit flags from destination connections, leading to potential issues in connection management. Specifically, when IP_VS_CONN_F_ONE_PACKET connections are incorrectly synchronized, it can create stale hash nodes pointing to freed structures, causing unintended data exposure and connection handling errors. The resolution involves ensuring that this flag is dropped upon binding synced connections to prevent such inconsistencies.

References