CVE-2026-89776

CVE-2026-89776 affects the Linux kernel VXLAN VNI filter (vxlan: vnifilter). The root cause is that GROUP/GROUP6 address attributes were declared with NLA_BINARY and only a maximum length, allowing validate_nla() to accept payloads shorter than the address. The consumer then performs an unconditi...