CVE-2022-50405

The CVE-2022-50405 entry describes a Linux kernel race in the vxlan path (net/tunnel) where deleting a vxlan device during packet reception can release a sock before sk_user_data readers finish. This leads to a NULL pointer dereference in vxlan_ecn_decapsulate() / vxlan_get_sk_family(). The repro...

PT-2025-38422

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the VXLAN implementation when deleting a VXLAN device during packet reception. This can lead to a NULL pointer dereference within the vxlan ecn decapsulate...