CVE-2026-68477
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the ipvsh argument was provided. This can cause problems with apps over IPv6. As for the only official app in the kernel tree (FTP) this problem is harmless because we use Netfilter to mangle the FTP ports and we do not adjust the TCP seq numbers. Also, provide correct offset of the ICMPV6 header in ip_vs_out_icmp_v6() for correct checksum checks when the IPv6 packet has extension headers.
Affected versions
Linux kernel versions
2.6.28
and later are affected. Fixed in
5.10.261,
5.15.212,
6.1.178,
6.6.145,
6.12.97,
6.18.40,
7.1.5,
7.2-rc4
and their respective stable series.
References
8 totalFrequently asked questions
-
What is CVE-2026-68477?
CVE-2026-68477 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 2.6.28 onward and has been patched in 5.10.261, 5.15.212, 6.1.178 and others. CVE-2026-68477 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-68477?
Yes. CVE-2026-68477 has been patched. Fixed versions include 5.10.261, 5.15.212, 6.1.178 and others. If you are running Linux kernel 2.6.28 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-68477 actively exploited?
No. CVE-2026-68477 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.