What is the CVSS score of CVE-2026-80714?

CVE-2026-80714 has a contested CVSS base score of 9.8 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Linux Kernel are affected by CVE-2026-80714?

CVE-2026-80714 is a memory-corruption vulnerability in the Linux kernel's IPVS (IP Virtual Server) subsystem affecting backup load-balancer directors; hash table corruption could disrupt failover…. A patch is available.

How to fix or mitigate CVE-2026-80714?

Within 24 hours, inventory all systems running Linux IPVS backup directors and cross-reference kernel versions against CVE-2026-80714 affected ranges using vendor advisories. Within 7 days, validate the vendor-released patch in a staging IPVS environment to confirm failover and connection-synchronization behavior remain intact. Within 30 days, deploy the patched kernel to production IPVS backup systems during planned maintenance windows, staggering updates to preserve redundancy of your load-balancing infrastructure.

Linux Kernel CVE-2026-80714

EUVD-2026-67449 CRITICAL

2026-08-28 Linux

GHSA-f6rm-x6vv-8jhg

Information Disclosure Linux Red Hat Suse

Critical

Disputed · 9.8 Vendor: Linux

Severity by source

Sources disagree (Medium–Critical)

Vendor (Linux) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

6.5 MEDIUM

Triggering needs the IPVS sync daemon plus a create-before-destination race with the one-packet flag, so AC:H; realistic impact is a director crash (A:H) with limited integrity risk from the UAF.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

SUSE

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Red Hat

7.0 MEDIUM

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Linux

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 29, 2026 - 08:12 vuln.today

CVSS changed

Aug 29, 2026 - 07:22 NVD

9.8 (CRITICAL)

Patch available

Aug 28, 2026 - 09:02 EUVD

CVE Published

Aug 28, 2026 - 06:53 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 28, 2026 - 06:53 cve.org

CRITICAL 9.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ipvs: do not propagate one-packet flag to synced conns

Synced connections can be created before their destination exists. When the destination is later added, ip_vs_bind_dest() copies connection flags from the destination into cp->flags.

IP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced connection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed, expiry can treat it as a one-packet connection and skip unlinking the existing conn_tab node, leaving stale hash nodes pointing at a freed struct ip_vs_conn.

Drop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced connections.

AnalysisAI

Use-after-free in the Linux kernel's IPVS (IP Virtual Server) connection-synchronization path allows corruption of the connection hash table on backup directors running the IPVS sync daemon. When a synced connection is bound to a destination that carries the IP_VS_CONN_F_ONE_PACKET flag, expiry logic wrongly skips unlinking the conn_tab node, leaving a stale hash entry pointing at a freed struct ip_vs_conn. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Install

technique details hidden

Execute

technique details hidden

Impact

technique details hidden

Recon

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Install

technique details hidden

Execute

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Requires a Linux host acting as an IPVS backup director with the connection-synchronization daemon running (LVS master/backup sync, as used by LVS clusters and IPVS-mode kube-proxy failover setups). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The provided CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N, 9.8) is the conservative worst-case scoring that the kernel CVE process auto-applies to memory-safety bugs and materially overstates real-world exploitability here. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patch: upgrade to a fixed stable kernel - 6.18.44, 6.12.103, 6.6.151, 6.1.183, 5.15.216, or 5.10.265 or later on the matching series - or apply your distribution's backport referencing CVE-2026-80714; the upstream commits are published at git.kernel.org/stable (e.g. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all systems running Linux IPVS backup directors and cross-reference kernel versions against CVE-2026-80714 affected ranges using vendor advisories. …

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

CVE-2026-80714 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-80714

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

Recommended ActionAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code