{"id":"CVE-2026-53270","summary":"ipvs: clear the svc scheduler ptr early on edit","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: clear the svc scheduler ptr early on edit\n\nip_vs_edit_service() while unbinding the old scheduler clears\nthe svc-\u003escheduler ptr after the scheduler module initiates\nRCU callbacks. This can cause packets to use the old\nscheduler at the time when svc-\u003esched_data is already freed\nafter RCU grace period.\n\nFix it by clearing the ptr early in ip_vs_unbind_scheduler(),\nbefore the done_service method schedules any RCU callbacks.\n\nAlso, if the new scheduler fails to initialize when replacing\nthe old scheduler, try to restore the old scheduler while still\nreturning the error code.","modified":"2026-10-28T02:31:14.525202248Z","published":"2026-06-25T08:39:55.830Z","related":["ALSA-2026:75746","ALSA-2026:75747","ALSA-2026:76738","SUSE-SU-2026:23066-1","SUSE-SU-2026:23068-1","SUSE-SU-2026:23193-1","SUSE-SU-2026:23194-1","SUSE-SU-2026:23221-1","SUSE-SU-2026:23231-1","SUSE-SU-2026:23237-1","SUSE-SU-2026:23241-1","SUSE-SU-2026:23244-1","SUSE-SU-2026:3594-1","SUSE-SU-2026:3790-1","SUSE-SU-2026:3810-1","openSUSE-SU-2026:21555-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53270.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/14e4689c113b4c06af1069364ade24fdd7055f33"},{"type":"WEB","url":"https://git.kernel.org/stable/c/193989cc6d80dd8e0460fb3992e69fa03bf0ff9b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/19a9493faa4bf3c7bd0a386f30b60b1bb4a3da03"},{"type":"WEB","url":"https://git.kernel.org/stable/c/25918720ba97f974a4f8d433b5a0132c5b43f6f3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7d4f5004511757e3984901ffb412fcf858d80ed5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c6376b9b1b4d2bad638256b1b3588e073344ae69"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d10730a1f2caf08088e0db1b19b242f3e6fa5f06"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e4feec3174036ba772006be74beee0efa09a9eb8"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53270.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53270"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"05f00505a89acd21f5d0d20f5797dfbc4cf85243"},{"fixed":"d10730a1f2caf08088e0db1b19b242f3e6fa5f06"},{"fixed":"e4feec3174036ba772006be74beee0efa09a9eb8"},{"fixed":"7d4f5004511757e3984901ffb412fcf858d80ed5"},{"fixed":"c6376b9b1b4d2bad638256b1b3588e073344ae69"},{"fixed":"14e4689c113b4c06af1069364ade24fdd7055f33"},{"fixed":"25918720ba97f974a4f8d433b5a0132c5b43f6f3"},{"fixed":"19a9493faa4bf3c7bd0a386f30b60b1bb4a3da03"},{"fixed":"193989cc6d80dd8e0460fb3992e69fa03bf0ff9b"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3.18.23"},{"fixed":"3.19"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4.1.11"},{"fixed":"4.2"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c803fddd2a95a70873c68dbff42d4c59fd2e674e"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4ec8fb23158797affae7993c15beba080488482f"}]}],"versions":["v3.18.140","v3.18.139","v3.18.138","v3.18.137","v3.18.136","v3.18.135","v3.18.134","v3.18.133","v3.18.132","v3.18.131","v3.18.130","v3.18.129","v3.18.128","v3.18.127","v3.18.126","v3.18.125","v3.18.124","v3.18.123","v3.18.122","v3.18.121","v3.18.120","v3.18.119","v3.18.118","v3.18.117","v3.18.116","v3.18.115","v3.18.114","v3.18.113","v3.18.112","v3.18.111","v3.18.110","v3.18.109","v3.18.108","v3.18.107","v3.18.106","v3.18.105","v3.18.104","v3.18.103","v3.18.102","v3.18.101","v3.18.100","v3.18.99","v3.18.98","v3.18.97","v3.18.96","v3.18.95","v3.18.94","v3.18.93","v3.18.92","v3.18.91","v3.18.90","v3.18.89","v3.18.88","v3.18.87","v3.18.86","v3.18.85","v3.18.84","v3.18.83","v3.18.82","v3.18.81","v3.18.80","v3.18.79","v3.18.78","v3.18.77","v3.18.76","v3.18.75","v3.18.74","v3.18.73","v3.18.72","v3.18.71","v3.18.70","v3.18.69","v3.18.68","v3.18.67","v3.18.66","v3.18.65","v3.18.64","v3.18.63","v3.18.62","v3.18.61","v3.18.60","v3.18.59","v3.18.58","v3.18.57","v3.18.56","v3.18.55","v3.18.54","v3.18.53","v3.18.52","v3.18.51","v3.18.50","v3.18.49","v3.18.48","v3.18.47","v3.18.46","v3.18.45","v3.18.44","v3.18.43","v3.18.42","v3.18.41","v3.18.40","v3.18.39","v3.18.38","v3.18.37","v3.18.36","v3.18.35","v3.18.34","v3.18.33","v3.18.32","v3.18.31","v3.18.30","v3.18.29","v3.18.28","v3.18.27","v3.18.26","v3.18.25","v3.18.24","v3.18.23","v4.1.52","v4.1.51","v4.1.50","v4.1.49","v4.1.48","v4.1.47","v4.1.46","v4.1.45","v4.1.44","v4.1.43","v4.1.42","v4.1.41","v4.1.40","v4.1.39","v4.1.38","v4.1.37","v4.1.36","v4.1.35","v4.1.34","v4.1.33","v4.1.32","v4.1.31","v4.1.30","v4.1.29","v4.1.28","v4.1.27","v4.1.26","v4.1.25","v4.1.24","v4.1.23","v4.1.22","v4.1.21","v4.1.20","v4.1.19","v4.1.18","v4.1.17","v4.1.16","v4.1.15","v4.1.14","v4.1.13","v4.1.12","v4.1.11"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53270.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"5.10.259"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.210"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.176"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.143"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.94"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.36"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.13"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53270.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}