CVE-2026-97965

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN driver. When transmitting network packets on devices configured with Group Based Policy GBP metadata, the driver fails to properly initialize an internal stack variable if packet flags are omitted. This issue allows residual kern...

CVE-2026-98023

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN driver. A local user with network administration privileges can cause a Denial of Service DoS by configuring dynamic forwarding database FDB entries that reference a shared next-hop group across multiple devices. This improper...

CVE-2026-98122

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN driver. A local unprivileged attacker can cause a denial of service DoS or potentially escalate privileges through memory corruption. This vulnerability occurs because the Multicast Database MDB subsystem improperly validates...

Linux kernel VXLAN DoS

The vulnerability in the routeshortcircuit function within the drivers/net/vxlan/vxlancore.c file of the Linux kernel network device driver is related to dereferencing an index. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

SUSE CVE-2026-74615

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...

EUVD-2026-64552

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...

CVE-2026-74615 vxlan: do not arm the ageing timer on a device that is down

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlanchangelink arms vxlan-agetimer whenever the requested ageing interval differs from the configured one: if conf.ageinterval != vxlan-cfg.ageinterval...

CVE-2026-74615

CVE-2026-74615 is a slab-use-after-free in the Linux kernel vxlan module. The root cause is that vxlan_changelink() arms the FDB ageing timer without a netif_running() check, so on a never-brought-up device the timer persists after free_netdev() releases the vxlan_dev struct, causing the timer co...

Linux vxlan_exit_batch_net Buffer Overflow

Vulnerability of the vxlanexitbatchnet function in the drivers/net/vxlan.c module – The Linux kernel’s network adapter support driver has a vulnerability that leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to compromise the integrity and...

CVE-2021-47371

In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix memory leaks in nexthop notification chain listeners syzkaller discovered memory leaks 1 that can be reduced to the following commands: ip nexthop add id 1 blackhole devlink dev reload pci/0000:06:00.0 As part of the...

CVE-2021-47371

In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix memory leaks in nexthop notification chain listeners syzkaller discovered memory leaks 1 that can be reduced to the following commands: ip nexthop add id 1 blackhole devlink dev reload pci/0000:06:00.0 As part of the...