CVE-2026-80714

Critical

Description

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ip_vs_bind_dest() copies connection flags from the destination into cp->flags. IP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced connection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed, expiry can treat it as a one-packet connection and skip unlinking the existing conn_tab node, leaving stale hash nodes pointing at a freed struct ip_vs_conn. Drop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced connections.

SeverityCritical

CVSS9.8

Exploit probability—

Product

Linux

PublishedAug 28, 2026

First seenAug 28, 2026

How to fix

Update

Linux Linux06d1d9b56ef8132fbf85006885eb43d9510b8b02, acbdc276091b308ca7794acb86e761f8203e2f59, 300348e3ba1521b003d59825f97e24f9a6859688, 44af98cc7d5ef8e730488d5df1eecd5deeaa5947, 4649e6faeecdc2d44bfa6ccbe405eef27e55d816, b5ee5b266f833601ac4817f6df0bc496fc376a28, e7acfc990c29890c883d0d0ce3f737d003a43b44, a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b or later

Affected products

Product	Affected versions	Fixed in
Linux Linux	26ec037f9841e49cc5c615deb8e1e73e5beab2ca ≤ v < 06d1d9b56ef8132fbf85006885eb43d9510b8b02, 26ec037f9841e49cc5c615deb8e1e73e5beab2ca ≤ v < acbdc276091b308ca7794acb86e761f8203e2f59, 26ec037f9841e49cc5c615deb8e1e73e5beab2ca ≤ v < 300348e3ba1521b003d59825f97e24f9a6859688, 26ec037f9841e49cc5c615deb8e1e73e5beab2ca ≤ v < 44af98cc7d5ef8e730488d5df1eecd5deeaa5947, 26ec037f9841e49cc5c615deb8e1e73e5beab2ca ≤ v < 4649e6faeecdc2d44bfa6ccbe405eef27e55d816, 26ec037f9841e49cc5c615deb8e1e73e5beab2ca ≤ v < b5ee5b266f833601ac4817f6df0bc496fc376a28, 26ec037f9841e49cc5c615deb8e1e73e5beab2ca ≤ v < e7acfc990c29890c883d0d0ce3f737d003a43b44, 26ec037f9841e49cc5c615deb8e1e73e5beab2ca ≤ v < a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b, 2.6.36	06d1d9b56ef8132fbf85006885eb43d9510b8b02, acbdc276091b308ca7794acb86e761f8203e2f59, 300348e3ba1521b003d59825f97e24f9a6859688, 44af98cc7d5ef8e730488d5df1eecd5deeaa5947, 4649e6faeecdc2d44bfa6ccbe405eef27e55d816, b5ee5b266f833601ac4817f6df0bc496fc376a28, e7acfc990c29890c883d0d0ce3f737d003a43b44, a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.