« Volver al listado

CVE-2026-98078

Estado: En análisisSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix reversed sequence option serialization

hton_seq() expects the host-order source first and the unaligned network-order destination second. The version 1 sync sender passes these arguments in reverse for both sequence blocks. This leaves 24 bytes of the kmalloc-backed message unwritten. It may disclose stale heap data and replace the live connection sequence state with values read from the buffer.

Pass the connection sequence state as the source and the message payload as the destination for both blocks.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-98078",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "986a075795339c5ea1122ce9290dfd5504252eb0",
              "lessThan": "ae38b2ae16f709c0193e1b4340bde26ef3e2687d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "986a075795339c5ea1122ce9290dfd5504252eb0",
              "lessThan": "bbc68ba258a4eb0a2ca3b3a105550801aa8b00b0",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "986a075795339c5ea1122ce9290dfd5504252eb0",
              "lessThan": "f487b5788f15c6c32a219ed1480d25c93fc18d30",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "986a075795339c5ea1122ce9290dfd5504252eb0",
              "lessThan": "677ff8ab30a663cde984d8afe86465fd0d81aeef",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "986a075795339c5ea1122ce9290dfd5504252eb0",
              "lessThan": "e1c9f9446d3eaae323f1689f9e5de3b1ad6e47ec",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "986a075795339c5ea1122ce9290dfd5504252eb0",
              "lessThan": "524599714558da83747c04952d378155c69f5b6b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "986a075795339c5ea1122ce9290dfd5504252eb0",
              "lessThan": "de6cc6ec7932bc530f2bb92005dac9123d50659c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "986a075795339c5ea1122ce9290dfd5504252eb0",
              "lessThan": "b04578b74f2d3755548fe9e829e3b2a6c6f966a1",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "net/netfilter/ipvs/ip_vs_sync.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.39"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "2.6.39",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.271",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.222",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.189",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.158",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.111",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.7",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc3",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "net/netfilter/ipvs/ip_vs_sync.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-25T11:17:37.200",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/524599714558da83747c04952d378155c69f5b6b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/677ff8ab30a663cde984d8afe86465fd0d81aeef",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ae38b2ae16f709c0193e1b4340bde26ef3e2687d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b04578b74f2d3755548fe9e829e3b2a6c6f966a1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bbc68ba258a4eb0a2ca3b3a105550801aa8b00b0",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/de6cc6ec7932bc530f2bb92005dac9123d50659c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e1c9f9446d3eaae323f1689f9e5de3b1ad6e47ec",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f487b5788f15c6c32a219ed1480d25c93fc18d30",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Undergoing Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: fix reversed sequence option serialization\n\nhton_seq() expects the host-order source first and the unaligned\nnetwork-order destination second. The version 1 sync sender passes these\narguments in reverse for both sequence blocks. This leaves 24 bytes of the\nkmalloc-backed message unwritten. It may disclose stale heap data and\nreplace the live connection sequence state with values read from the\nbuffer.\n\nPass the connection sequence state as the source and the message payload as\nthe destination for both blocks."
    }
  ],
  "lastModified": "2026-10-03T11:18:29.490",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}