Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43086

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ip_vs_add_service error path When ip_vs_bind_scheduler() succeeds in ip_vs_add_service(), the local variable sched is set to NULL. If ip_vs_start_estimator() subsequently fails, the out_err cleanup calls ip_vs_unbind_scheduler(svc, sched) with sched == NULL. ip_vs_unbind_scheduler() passes the cur_sched NULL check (because svc->scheduler was set by the successful bind) but then dereferences the NULL s
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:872971b1563d46d88293fb96d8321acdce8f5d1e448b33adec66cbadbea31b1f
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/ipvs/ip_vs_ctl.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"730663352c9178f33fcf5929f4a37c1f1ca5a693","status":"affected","version":"705dd34440812735ece298eb5bc153fde9544d42","versionType":"git"},{"lessThan":"4039959315008888dd53c37674d33351817a5166","status":"affected","version":"705dd34440812735ece298eb5bc153fde9544d42","versionType":"git"},{"lessThan":"a32dabacee111cea083ddd57a03635672e1bff29","status":"affected","version":"705dd3444081273…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/ipvs/ip_vs_ctl.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.83","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.24","versionType":"semver"},{"le…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/ipvs/ip_vs_ctl.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"730663352c9178f33fcf5929f4a37c1f1ca5a693","status":"affected","version":"705dd34440812735ece298eb5bc153fde9544d42","versionType":"git"},{"lessThan":"4039959315008888dd53c37674d33351817a5166","status":"affected","version":"705dd34440812735ece298eb5bc153fde9544d42","versionType":"git"},{"lessThan":"a32dabacee111cea083ddd57a03635672e1bff29","status":"affected","version":"705dd3444081273…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/ipvs/ip_vs_ctl.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.83","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.24","versionType":"semver"},{"le…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/affected/1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/4039959315008888dd53c37674d33351817a5166"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/730663352c9178f33fcf5929f4a37c1f1ca5a693"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/9a91797e61d286805ae10a92cc48959c30800556"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/a32dabacee111cea083ddd57a03635672e1bff29"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/c2ddbe577e2ebf63f2d8fb15cdc7503af70f3e94"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c2fe4c2447abf70bdb2aba1a942eed1fd76da529553231d34d7396dcc18114a8 · sha256:a1be3837753cfe94… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer