Linux Kernel Vulnerability in IP Virtual Server Implementation

CVE-2026-98857

What is CVE-2026-98857?

A vulnerability in the IP Virtual Server (IPVS) of the Linux kernel allows an attacker to exploit cache growth by creating entries for previously unseen destination addresses. The existing mechanism, which utilizes a maximum size for cache tables, does not adequately prevent the continuous addition of new entries, leading to potential resource exhaustion. This vulnerability could be exploited to prevent the cache from reclaiming memory properly, impacting system performance. A mitigation has been implemented to reject new cache entries once the size exceeds a specific threshold, ensuring that the system remains functional while managing resource usage effectively.

References