CVE-2026-74724

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ipvs: avoid out-of-bounds write in ip_vs_nat_icmp<br /> <br /> Sashiko warns that local attacker can modify the packet<br /> while it is processed by IPVS. Some places read the<br /> IP ihl field multiple times which can cause out-of-bounds<br /> access. One such place is ip_vs_nat_icmp where we<br /> can write after the validated area.<br /> <br /> Fix it by providing ciph argument just like it is done for<br /> IPv6 and use ciph-&gt;len as offset to the embedded transport<br /> header.<br /> <br /> Modify some IPv4 header checks by reading the ihl field<br /> only once.