A critical stack out-of-bounds write vulnerability in the Linux kernel IPVS module allows unauthenticated remote attackers to potentially achieve code execution or system crashes.

The vulnerability resides in the ip_vs_in_icmp() function within the IPVS subsystem. An attacker can trigger a stack out-of-bounds write by sending a specially crafted ICMP packet that exploits stale IPv4 option metadata after the kernel rebases the packet header, leading to memory corruption.

Successful exploitation of this vulnerability can lead to a complete compromise of the affected system, including unauthorized code execution with kernel-level privileges. Given the CVSS score of 9.8, this flaw represents a critical risk to infrastructure stability and data confidentiality. Systems acting as load balancers or gateways using IPVS are at the highest risk of service disruption or total takeover.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, or the latest available stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected process terminations that may indicate exploitation attempts. Implement network-level logging to identify malformed or anomalous ICMP traffic directed at IPVS-enabled interfaces.

Compensating Controls: If immediate patching is not feasible, consider using network security controls to restrict ICMP traffic that is not strictly necessary for network operations. Deploying an Intrusion Detection System (IDS) configured to detect malformed ICMP packets may help identify exploitation attempts.

Public Exploit Available: No.

Due to the critical nature of this vulnerability and the potential for remote code execution, organizations should prioritize the deployment of the vendor-supplied security patches. Administrators must verify their kernel versions against the provided fixed releases and apply updates according to their established patch management lifecycle to eliminate the risk of exploitation.