CVE-2026-68476

A flaw was found in the Linux kernel's IP Virtual Server (IPVS) module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service (DoS) by crashing the system or potentially corrupt system memory.

Red Hat has rated this vulnerability as Important rather than Moderate because improper memory handling during packet processing can lead to kernel memory corruption or an abrupt system crash. The issue specifically affects environments running IP Virtual Server (IPVS) functionality, which is not enabled or loaded by default across standard installations. Consequently, exposure is limited to hosts actively configured for IPVS packet forwarding or load-balancing clusters.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.