CVE-2026-53270CWE-416

CVE-2026-53270

High · published June 25, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ipvs: clear the svc scheduler ptr early on edit

ip_vs_edit_service() while unbinding the old scheduler clears

the svc->scheduler ptr after the scheduler module initiates

RCU callbacks. This can cause packets to use the old

scheduler at the time when svc->sched_data is already freed

after RCU grace period.

Fix it by clearing the ptr early in ip_vs_unbind_scheduler(),

before the done_service method schedules any RCU callbacks.

Also, if the new scheduler fails to initialize when replacing

the old scheduler, try to restore the old scheduler while still

returning the error code.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Weakness
CWE-416 · Use After Free
Published
2026-06-25T13:16Z
Affected products (20)
ProductVersionsFixed in
linux/linux_kernel≥ 3.18.23, < 3.193.19
linux/linux_kernel≥ 4.1.11, < 4.24.2
linux/linux_kernel≥ 4.2.1, < 5.10.2595.10.259
linux/linux_kernel≥ 5.11, < 5.15.2105.15.210
linux/linux_kernel≥ 5.16, < 6.1.1766.1.176
linux/linux_kernel≥ 6.2, < 6.6.1436.6.143
linux/linux_kernel≥ 6.7, < 6.12.946.12.94
linux/linux_kernel≥ 6.13, < 6.18.366.18.36
linux/linux_kernel≥ 6.19, < 7.0.137.0.13
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 25 JUN 08:39Z
    ipvs: clear the svc scheduler ptr early on edit
    cvelistv5