What is the CVSS score of CVE-2026-68477?

CVE-2026-68477 has a contested CVSS base score of 9.8 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Linux Kernel are affected by CVE-2026-68477?

A critical vulnerability in the Linux kernel's IPVS (IP Virtual Server) subsystem causes incorrect processing of IPv6 packets with extension headers, potentially affecting organizations'…. A patch is available.

How to fix or mitigate CVE-2026-68477?

Within 24 hours, identify and inventory all Linux systems running IPVS load balancers with IPv6 enabled, cross-reference against the vendor advisory to determine affected kernel versions, and assess criticality of each system. Within 7 days, deploy the vendor-released patch to test and development IPVS systems first, validate application load-balancing behavior post-patch (especially IPv6 traffic and FTP helpers if used), and schedule production patching windows. Within 30 days, complete patching of all affected production systems prioritizing those with highest IPv6 traffic volume, document remediation completion, and update kernel patch baseline for future deployments.

Linux Kernel CVE-2026-68477

EUVD-2026-59099 CRITICAL

2026-08-15 416baaa9-dc9f-4396-8d5f-8c081fb06d67

GHSA-g55r-28w7-4fjw

Information Disclosure Linux Red Hat Suse

Critical

Disputed · 9.8 Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Severity by source

Sources disagree (Medium–Critical)

Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

4.8 MEDIUM

Remote packets reach the bug (AV:N) but only on IPVS directors handling IPv6 with extension headers (AC:H); impact is limited misread/mishandling, so C:L and A:L, no integrity write.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

SUSE

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 MEDIUM

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 12:51 vuln.today

CVSS changed

Aug 17, 2026 - 06:22 NVD

9.8 (CRITICAL)

Patch available

Aug 15, 2026 - 07:20 EUVD

CVE Published

Aug 15, 2026 - 06:20 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 15, 2026 - 06:20 cve.org

CRITICAL 9.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix more places with wrong ipv6 transport offsets

Sashiko reports for more incorrect IPv6 transport offsets.

The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause problems with apps over IPv6. As for the only official app in the kernel tree (FTP) this problem is harmless because we use Netfilter to mangle the FTP ports and we do not adjust the TCP seq numbers.

Also, provide correct offset of the ICMPV6 header in ip_vs_out_icmp_v6() for correct checksum checks when the IPv6 packet has extension headers.

AnalysisAI

Incorrect IPv6 transport-header offset handling in the Linux kernel's IPVS (IP Virtual Server) load-balancing subsystem causes application-layer helper code and ICMPv6 checksum validation to misread packet headers when IPv6 traffic - particularly packets carrying extension headers - is processed. The IPVS TCP application path wrongly assumed an IPv4 network header even after the ipvsh offset argument was supplied, and ip_vs_out_icmp_v6() used an incorrect ICMPv6 offset. There is no public exploit identified at time of analysis; EPSS is low (0.21%, 12th percentile) and this is not on CISA KEV, and for the only in-tree app (FTP) the maintainers note the effect is harmless because port mangling is handled by Netfilter without TCP sequence adjustment.

Technical ContextAI

IPVS is the in-kernel Layer-4 load balancer (LVS) built on top of Netfilter, used to distribute connections across real servers and supporting application helpers (such as the FTP helper) that inspect and rewrite payload data. The bug is a header-offset miscalculation: when handling IPv6 connections, code paths computed transport-layer offsets as if the packet used an IPv4 fixed header, ignoring IPv6 extension headers and the provided ip_vs_iphdr (ipvsh) structure. This leads to reading TCP/transport data at the wrong location and, in ip_vs_out_icmp_v6(), to computing ICMPv6 checksums over the wrong header offset. No CWE was assigned, but the root-cause class is incorrect calculation / improper handling of protocol header offsets (akin to CWE-131/CWE-682-style offset errors) that yields out-of-bounds or wrong-field reads rather than a controllable write.

RemediationAI

Vendor-released patch: upgrade to a fixed stable kernel for your series - 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5 or later (7.2-rc4 in the mainline release-candidate line) - via your distribution's kernel update channel, referencing the fix commits at https://git.kernel.org/stable/c/3a9dc9b55b53d94613a587604b77d3b20024090c and the advisory at https://nvd.nist.gov/vuln/detail/CVE-2026-68477. Where immediate patching is not possible, the practical compensating control is to avoid the affected code path: on hosts not intended as load balancers, do not load the IPVS modules (blacklist ip_vs and its application helpers such as ip_vs_ftp), which fully removes exposure at the cost of disabling IPVS-based load balancing; on directors that must run IPVS, restrict or avoid IPVS handling of IPv6 application-helper traffic (for example prefer IPv4 virtual services or disable the FTP/app helper) until patched, accepting reduced IPv6 feature parity. These controls are only relevant to systems configured as IPVS/LVS directors.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

CVE-2026-68477 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-68477

Severity by source

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code