CVE-2026-53270: ipvs: clear the svc scheduler ptr early on edit

Published Jun 25, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

ipvs: clear the svc scheduler ptr early on edit

ipvseditservice() while unbinding the old scheduler clears the svc->scheduler ptr after the scheduler module initiates RCU callbacks. This can cause packets to use the old scheduler at the time when svc->scheddata is already freed after RCU grace period.

Fix it by clearing the ptr early in ipvsunbindscheduler(), before the doneservice method schedules any RCU callbacks.

Also, if the new scheduler fails to initialize when replacing the old scheduler, try to restore the old scheduler while still returning the error code.

Affected Software

22 affected componentsFixes available
Linux Linux kernel (ipvs)
Microsoft azl3 kernel 6.6.141.1-1<6.6.143.1-1
6.6.143.1-1
Linux Linux kernel>=3.18.23<3.19
Linux Linux kernel>=4.1.11<4.2
Linux Linux kernel>=4.2.1<5.10.259
Linux Linux kernel>=5.11<5.15.210
Linux Linux kernel>=5.16<6.1.176
Linux Linux kernel>=6.2<6.6.143
Linux Linux kernel>=6.7<6.12.94
Linux Linux kernel>=6.13<6.18.36
Linux Linux kernel>=6.19<7.0.13
Linux Linux kernel=4.2
Linux Linux kernel=4.2-rc5
Linux Linux kernel=4.2-rc6
Linux Linux kernel=4.2-rc7
Linux Linux kernel=4.2-rc8
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4
Linux Linux kernel=7.1-rc5
Linux Linux kernel=7.1-rc6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 6.6.143.1-1
  2. Compensating control

    If replacing the old scheduler and the new scheduler fails to initialize, fix it by clearing the ptr early in ip_vs_unbind_scheduler() (as described: “ip_vs_edit_service() while unbinding the old scheduler clears …”).

  3. Operational

    When unbinding/editing the scheduler, ensure svc->scheduler ptr is cleared early so done_service won’t schedule RCU callbacks after svc->sched_data has been freed; this prevents packets from using the old scheduler after the RCU grace period (per the description: “ipvs: clear the svc scheduler ptr early on edit”).

Event History

Jun 25, 2026
CVE Published
via MITRE·08:39 AM
Data Sourced
via MITRE·08:39 AM
DescriptionSeverity
Data Sourced
via NVD·09:16 AM
RemedyDescriptionSeverityAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:05 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:05 AM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2026-53270?

CVE-2026-53270 has a risk rating of 50.

2

How do I fix CVE-2026-53270?

To fix CVE-2026-53270, update your Linux kernel to the latest patched version that addresses this vulnerability.

3

What systems are affected by CVE-2026-53270?

CVE-2026-53270 affects systems running the Linux kernel with the IPVS feature enabled.

4

What type of vulnerability is CVE-2026-53270?

CVE-2026-53270 is a security vulnerability related to improper handling of service scheduler pointers in the Linux kernel.

5

What potential impact does CVE-2026-53270 have?

CVE-2026-53270 can cause packets to use an old scheduler, potentially leading to unexpected network behavior.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203