974 matches found
EUVD-2026-86819
In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...
CVE-2026-97965 vxlan: initialize _md in vxlan_xmit_one()
In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...
CVE-2026-97965
The Linux kernel contains a vulnerability in the vxlan component where a packet transmitted through a device configured with VXLAN_F_COLLECT_METADATA and VXLAN_F_GBP can cause information leakage. If the external ip_tunnel_info lacks the IP_TUNNEL_VXLAN_OPT_BIT flag, the md pointer remains pointi...
CVE-2026-97965
In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...
PT-2026-98686
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The VXLAN driver allows Forwarding Database FDB entries that reference a nexthop ID to be configured with a dynamic flag. This creates a race condition when two VXLAN devices share the...
PT-2026-98784
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the VXLAN Multicast Group Management MDB implementation. The function vxlan mdb is valid source incorrectly accepts all-zeros addresses for MDBE ATTR...
Linux Distros Unpatched Vulnerability : CVE-2026-98023
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in the Fixes tag allowed VXLAN FDB entries to point to FDB nexthops so that overl...
PT-2026-98629
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VXLAN implementation where the md stack variable is not initialized in the vxlan xmit one function. When a VXLAN device is configured with both VXLAN F COLLECT...
Linux Distros Unpatched Vulnerability : CVE-2026-98122
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: mdb: Fix use-after-free in vxlanmdbremotesrcdel vxlanmdbisvalidsource, which validates MDBEATTRSOURCE and every MDBEATTRSRCLIST member, accepts the...
Linux Distros Unpatched Vulnerability : CVE-2026-97965
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it usin...
CVE-2026-98122
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlanmdbremotesrcdel vxlanmdbisvalidsource, which validates MDBEATTRSOURCE and every MDBEATTRSRCLIST member, accepts the all-zeros address. A source list is only accepted on a , G entry, whose...
CVE-2026-98023
In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in the Fixes tag allowed VXLAN FDB entries to point to FDB nexthops so that overlay traffic could be load balanced across multiple VTEPs. Such entries...
CVE-2026-97965
In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...
CVE-2026-98122: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlanmdbremotesrcdel vxlanmdbisvalidsource, which validates MDBEATTRSOURCE and every MDBEATTRSRCLIST member, accepts the all-zeros address. A source list is only accepted on a , G entry, whose...
CVE-2026-98023: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a nexthop id The commit cited in the Fixes tag allowed VXLAN FDB entries to point to FDB nexthops so that overlay traffic could be load balanced across multiple VTEPs. Such entries...
CVE-2026-97965: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...
SUSE CVE-2026-93250
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlanmdbflush vxlanmdbflush iterates over the MDB entries using hlistforeachentrysafe, which only tolerates the removal of the current entry. Contrary to the comment above the loop, the removal o...
DEBIAN-CVE-2026-93250
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlanmdbflush vxlanmdbflush iterates over the MDB entries using hlistforeachentrysafe, which only tolerates the removal of the current entry. Contrary to the comment above the loop, the removal o...
CVE-2026-93250
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlanmdbflush vxlanmdbflush iterates over the MDB entries using hlistforeachentrysafe, which only tolerates the removal of the current entry. Contrary to the comment above the loop, the removal o...
UBUNTU-CVE-2026-93250
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlanmdbflush vxlanmdbflush iterates over the MDB entries using hlistforeachentrysafe, which only tolerates the removal of the current entry. Contrary to the comment above the loop, the removal o...