CVE-2026-43086

A flaw was found in the Linux kernel's IP Virtual Server (IPVS) component. A local attacker could trigger a NULL pointer dereference in the ip_vs_add_service error path. This occurs when ip_vs_start_estimator() fails after ip_vs_bind_scheduler() succeeds, leading to ip_vs_unbind_scheduler() being called with a NULL scheduler parameter. Successful exploitation of this vulnerability would cause a kernel panic, resulting in a Denial of Service (DoS) to the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.