Log in Start free

Vulnerability · Published Oct 18, 2026 · Assigned by Linux

CVE-2026-98857ipvs: bound LBLCR and LBLC cache growth

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 94.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for every previously unseen destination address. The table max_size only tells the periodic collector to reclaim entries after the cache has already exceeded the limit. It does not reclaim entries that the attacker continues to use. Reject new cache entries once either table reaches max_size * 3 / 2. The extra headroom lets the periodic collector catch up while the existing scheduler fallback continues to use the selected destination when cache creation fails. New traffic therefore stays serviceable without growing the tables further.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-98857
Debian:13linux6.12.113-1DEBIAN-CVE-2026-98857
Debian:14linux7.2.10-1DEBIAN-CVE-2026-98857
Debian:12linux-6.126.12.113-1~deb12u1DEBIAN-CVE-2026-98857
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinuxno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-hwe-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-oem-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-98857
Ubuntu:26.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-riscv-7.0no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-98857
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-98857
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-98857

Affected products (as reported)

VendorProductVersions
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 8b93288b4543ad5139a25a5b211a07bf755652dd1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before f6e9446bfb79907d3092fc45a0054b0c3b329bfe1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 488eaba207dd2e4c5afc65e18dc237d70f01d2831da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before bc9ff8e64771cc32a216953fe615386f46ac1eaa1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 31028d7b970962fbeda1e9131405c765510943001da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 6316d17324bd4ca400c26adb7b656c6e3447c2091da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 16c83c047ecfaf226ad81d45d77fa11a3184d0e41da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 2a3c3de660f96865f303fd25f1285f2ffbfd521d
Linux Linux 2.6.12

References