CVE-2026-74670

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the IPVS estimator kthread 0 where it starts with zeroed chain and tick limits until the initial calculation phase completes. If a network namespace teardown clears ipvs->enable during this phase, the ip vs est calc phase() function may return without establishing positive limits. Consequently, the kthread may enter its main loop and drain the est temp list while chain max, tick max, and est max count remain zero. As each enqueue operation consumes a tick row without est count reaching the zero est max count value, the row lookup eventually returns IPVS EST NTICKS, leading the ip vs enqueue estimator() function to write past the ticks and tick len arrays.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.