Linux Distros Unpatched Vulnerability : CVE-2026-63993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: do not reuse cached iphdr value after skbtunnelcheckpmtu skbtunnelcheckpmtu can change skb-head. Reusing oldiph afer skbtunnelcheckpmtu can cause an UAF...

CVE-2026-63993

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached iphdr value after skbtunnelcheckpmtu skbtunnelcheckpmtu can change skb-head. Reusing oldiph afer skbtunnelcheckpmtu can cause an UAF. Use instead iphdrskb as done in drivers/net/bareudp.c and...

CVE-2026-63993 vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached iphdr value after skbtunnelcheckpmtu skbtunnelcheckpmtu can change skb-head. Reusing oldiph afer skbtunnelcheckpmtu can cause an UAF. Use instead iphdrskb as done in drivers/net/bareudp.c and...

CVE-2026-63993 vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached iphdr value after skbtunnelcheckpmtu skbtunnelcheckpmtu can change skb-head. Reusing oldiph afer skbtunnelcheckpmtu can cause an UAF. Use instead iphdrskb as done in drivers/net/bareudp.c and...

EUVD-2026-45566

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached iphdr value after skbtunnelcheckpmtu skbtunnelcheckpmtu can change skb-head. Reusing oldiph afer skbtunnelcheckpmtu can cause an UAF. Use instead iphdrskb as done in drivers/net/bareudp.c and...

CVE-2026-63993

CVE-2026-63993 corresponds to a Linux kernel issue in VXLAN handling: skb_tunnel_check_pmtu() may modify skb->head, causing a stale ip_hdr() reference to be reused and potentially leading to use-after-free (UAF). The advised remediation is to use ip_hdr(skb) instead of the cached value, as imp...

CVE-2026-63993

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached iphdr value after skbtunnelcheckpmtu skbtunnelcheckpmtu can change skb-head. Reusing oldiph afer skbtunnelcheckpmtu can cause an UAF. Use instead iphdrskb as done in drivers/net/bareudp.c and...

PT-2026-61310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the vxlan component. The problem occurs when a cached ip hdr value is reused after the skb tunnel check pmtu function is called, as this function can...

EUVD-2026-42707

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. On all QFX10000 platforms in an EVPN-VxLAN scenario, if an...

CVE-2026-57020

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. On all QFX10000 platforms in an EVPN-VxLAN scenario, if an...

CVE-2026-57020

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. On all QFX10000 platforms in an EVPN-VxLAN scenario, if an...

CVE-2026-57020

CVE-2026-57020 affects Junos OS on Juniper’s QFX10000 Series. The issue arises in the packet forwarding engine (pfe) where an unauthenticated, adjacent attacker can trigger a DoS by sending IPv6 multicast traffic in an EVPN-VxLAN setup; if these packets reach the spine’s non-IRB interface, they f...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net:vxlan: Fixed a NULL dereference of ndtbl when IPv6 is disabled. When booting with the ‘ipv6.disable=1’ parameter, the ndtbl is never initialized because inet6init exits before ndiscinit is called, which is responsible for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iptunnel: iptunnelxmitstats should be adapted to use NETDEVPCPUSTATDSTATS. The commits that caused this issue overlooked the fact that vxlan/geneve uses udptunnel6xmitskb, which calls iptunnelxmitstats. iptunnelxmitstats assumed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: vxlan: Fixed memory leaks in the error path. The memory allocated by vxlanvnigroupinit is not freed during the error path, leading to memory leaks 1. This issue was fixed by calling vxlanvnigroupuninit during the error path. T...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net: vxlan: Prevent NULL dereferencing in vxlanxmitone. Neither sock4 nor sock6 pointers are guaranteed to be non-NULL in vxlanxmitone, especially if the iface is disabled. This can lead to the following NULL dereferences: -...

Astra Linux – Vulnerability in docker.io

Moby is an open-source container framework developed by Docker Inc., distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component, dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which is...

SUSE CVE-2026-31738

In the Linux kernel, the following vulnerability has been resolved: vxlan: validate ND option lengths in vxlannacreate vxlannacreate walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source LLAD...

Linux Distros Unpatched Vulnerability : CVE-2026-31738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: validate ND option lengths in vxlannacreate vxlannacreate walks ND options according to option-provided lengths. A malformed option can make the parser...

CVE-2026-31738

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN implementation. A remote attacker could exploit this vulnerability by sending specially crafted Neighbor Discovery ND options to the vxlannacreate function. This could cause the parser to read beyond the intended memory boundarie...