Linux Kernel EUVD-2026-32383

IPVS is a Linux kernel transport-layer load balancing module integrated into the netfilter framework, present since Linux 2.6.x (CPE: cpe:2.3:o:linux:linux_kernel:*). The vulnerability stems from a TOCTOU race condition between two asynchronous kernel paths: the netdev notifier ip_vs_dst_event() - which is supposed to flush cached destinations when a device goes down - and the IPVS destination cache population path. Because the FIB (Forwarding Information Base) can still return valid routes for a device after the notifier handler has completed but before the device is fully deregistered, IPVS may cache a new dest_dst pointing to the dying device, incrementing its reference count without a corresponding release. The fix adds a netif_running() check to short-circuit caching when the device is in a shutdown state. Although CWE is listed as N/A by NVD, the closest classification is CWE-362 (Concurrent Execution Using Shared Resource with Improper Synchronization - Race Condition) combined with CWE-401 (Missing Release of Memory after Effective Lifetime). The metadata tags listing 'Information Disclosure' conflict with the CVSS vector (C:N, I:N, A:H) and appear to be erroneous - this is a pure availability/resource-leak issue.