CVE-2026-74747

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ipvs module where the system fails to revalidate embedded headers after reading them from the skb frags. A local process can modify the ihl field, which, following the skb ensure writable() call, may result in a larger value. This leads to out-of-bounds access during ip send check(cih) calls within the ip vs nat icmp() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.