{"id":"CVE-2026-80714","revision":"506d2be921a844bcbbb3a5bd9e4eaef1","records":[{"revision":"506d2be921a844bcbbb3a5bd9e4eaef1","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-80714","aliases":[],"title":"ipvs: do not propagate one-packet flag to synced conns","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: do not propagate one-packet flag to synced conns\n\nSynced connections can be created before their destination exists. When\nthe destination is later added, ip_vs_bind_dest() copies connection flags\nfrom the destination into cp->flags.\n\nIP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced\nconnection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed,\nexpiry can treat it as a one-packet connection and skip unlinking the\nexisting conn_tab node, leaving stale hash nodes pointing at a freed\nstruct ip_vs_conn.\n\nDrop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced\nconnections.","state":0,"publishedAt":"2026-08-28T06:53:13.069+00:00","modifiedAt":"2026-10-16T19:26:34.808+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/ipvs/ip_vs_conn.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"26ec037f9841e49cc5c615deb8e1e73e5beab2ca\",\n                            \"lessThan\": \"06d1d9b56ef8132fbf85006885eb43d9510b8b02\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"26ec037f9841e49cc5c615deb8e1e73e5beab2ca\",\n                            \"lessThan\": \"acbdc276091b308ca7794acb86e761f8203e2f59\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"26ec037f9841e49cc5c615deb8e1e73e5beab2ca\",\n                            \"lessThan\": \"300348e3ba1521b003d59825f97e24f9a6859688\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"26ec037f9841e49cc5c615deb8e1e73e5beab2ca\",\n                            \"lessThan\": \"44af98cc7d5ef8e730488d5df1eecd5deeaa5947\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"26ec037f9841e49cc5c615deb8e1e73e5beab2ca\",\n                            \"lessThan\": \"4649e6faeecdc2d44bfa6ccbe405eef27e55d816\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"26ec037f9841e49cc5c615deb8e1e73e5beab2ca\",\n                            \"lessThan\": \"b5ee5b266f833601ac4817f6df0bc496fc376a28\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"26ec037f9841e49cc5c615deb8e1e73e5beab2ca\",\n                            \"lessThan\": \"e7acfc990c29890c883d0d0ce3f737d003a43b44\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"26ec037f9841e49cc5c615deb8e1e73e5beab2ca\",\n                            \"lessThan\": \"a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/ipvs/ip_vs_conn.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.36\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.36\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.265\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.216\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.183\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.151\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.103\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.44\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.8\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://git.kernel.org/stable/c/06d1d9b56ef8132fbf85006885eb43d9510b8b02","https://git.kernel.org/stable/c/acbdc276091b308ca7794acb86e761f8203e2f59","https://git.kernel.org/stable/c/300348e3ba1521b003d59825f97e24f9a6859688","https://git.kernel.org/stable/c/44af98cc7d5ef8e730488d5df1eecd5deeaa5947","https://git.kernel.org/stable/c/4649e6faeecdc2d44bfa6ccbe405eef27e55d816","https://git.kernel.org/stable/c/b5ee5b266f833601ac4817f6df0bc496fc376a28","https://git.kernel.org/stable/c/e7acfc990c29890c883d0d0ce3f737d003a43b44","https://git.kernel.org/stable/c/a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80714","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-80714","identifiers":["CVE-2026-80714"]},"retained":false,"historicalAffected":[]}],"coverage":[]}