In the Linux kernel, the following vulnerability has been resolved:
ipvs: do not propagate one-packet flag to synced conns
Synced connections can be created before their destination exists. When the destination is later added, ip_vs_bind_dest() copies connection flags from the destination into cp->flags.
IP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced connection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed, expiry can treat it as a one-packet connection and skip unlinking the existing conn_tab node, leaving stale hash nodes pointing at a freed struct ip_vs_conn.
Drop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced connections.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.18-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-toolsUpgrade perf6.18Upgrade kernel6.18-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.18.44-99.149Upgrade perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade microvm-kernel6.18Upgrade bpftool6.12Upgrade python3-perf6.18Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.18-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.103-127.188Upgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade perf6.18-debuginfoUpgrade bpftool6.18Upgrade kernel6.12-headersUpgrade kernel6.18-headersUpgrade kernel6.12Upgrade kernel6.18-toolsUpgrade kernel6.18-modules-extraUpgrade kernel6.18-develUpgrade bpftool6.12-debuginfoUpgrade kernel6.18Upgrade kernel6.18-debuginfoUpgrade kernel6.12-develUpgrade python3-perf6.12Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-debuginfo-common-x86_64Upgrade perf6.12-debuginfo | Sep 30, 2026 | Aug 28, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 30, 2026 | Aug 30, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 2, 2026 | Aug 28, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-core | Sep 28, 2026 | Sep 26, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-198-fipsUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-gkeopUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-oracleUpgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1117-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-198-generic-64k | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub