CVE-2026-74747
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
26/08/2026
Última modificación:
27/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ipvs: revalidate ihl to prevent out-of-bounds access<br />
<br />
While the outer IP header is already pulled into the skb head,<br />
we must be careful and revalidate the embedded headers after<br />
reading them from the skb frags to prevent out-of-bounds<br />
access.<br />
<br />
One such place reported by Sashiko is ip_vs_nat_icmp() where<br />
local process can change the ihl field and after<br />
skb_ensure_writable() we can see larger value which is a<br />
problem for the ip_send_check(cih) calls.<br />
<br />
Add check to drop the packet if the ihl field is changed.
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA