AZL-97830
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-97830.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-97830
- Upstream
- Published
- 2026-08-26T15:16:53Z
- Modified
- 2026-08-29T05:27:27Z
- Summary
- CVE-2026-74747 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ipvs: revalidate ihl to prevent out-of-bounds access
While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent out-of-bounds access.
One such place reported by Sashiko is ipvsnaticmp() where local process can change the ihl field and after skbensurewritable() we can see larger value which is a problem for the ipsend_check(cih) calls.
Add check to drop the packet if the ihl field is changed.
- References