The Linux kernel contains a flaw in the IPVS load‑balanced service module. When a service’s scheduler is unbound, the svc->scheduler pointer is cleared only after RCU callbacks are scheduled. This timing gap can cause the scheduler structure to be freed while packets are still being processed, leading to a use‑after‑free bug (CWE‑416). The resulting kernel memory corruption can trigger a crash or, if an attacker can control the freed memory, allow arbitrary code execution in kernel context.

All Linux kernel versions that include the IPVS module and run the unpatched ip_vs_edit_service() path are potentially affected. The CVE does not specify affected kernel releases, so systems running a Linux kernel with IPVS enabled are at risk.

The CVSS score is not publicly available and EPSS is missing. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires network access to a host running the vulnerable IPVS service. The lack of a low exploitation probability score combined with the severity of kernel memory corruption warrants a high‑risk assessment. An attacker could cause denial of service or elevate privileges on the host.