Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: vxlan: Fixed the nexthop hash size. The nexthop code expects a 31-bit hash, such as the one returned by fibmultipathhash and rt6multipathhash. Passing a 32-bit hash returned by skbgethash can lead to issues, especially when th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vxlan: The pxbnetworkmaypull function was used in routeshortcircuit. routeshortcircuit currently calls pbkmaypullskb, sizeofstruct iphdr or ipv6hdr, which checks whether bytes are available starting from skb-data. However, in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: vxlan: It is required to have CAPNETADMIN in the device’s netns for the changelink function. A tunnel changelink operates on at most two netns: devnetdev and the sticky underlay netns vxlan-net. These two netns differ once the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net:vxlan: Fixed a NULL dereference of ndtbl when IPv6 is disabled. When booting with the ‘ipv6.disable=1’ parameter, the ndtbl is never initialized because inet6init exits before ndiscinit is called, which is responsible for...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vxlan: Do not reuse the cached iphdr value after skbtunnelcheckpmtu. skbtunnelcheckpmtu may change skb-head. Reusing the old iph after skbtunnelcheckpmtu can lead to a Use-After-Free error. Instead, use iphdrskb, as done in...

CVE-2026-103994

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-102054

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...

CVE-2026-102053

An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming...

CVE-2026-102054

Juniper Networks Junos OS and Junos OS Evolved are affected by an Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM . An unauthenticated, adjacent attacker can exploit this by sending VXLAN overlay-ping traffic to a local VTEP, potentially resulting in the disclosure of s...

EUVD-2026-101378

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...

CVE-2026-102054 Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...

CVE-2026-102053 Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used

An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming...

EUVD-2026-101377

An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming...

CVE-2026-102053

A vulnerability exists in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms . The root cause is an Improper Release of Memory Before Removing Last Reference , which allows a configured EVPN peer to trigger a denial of service through memory exhaustion ....

CVE-2026-103994

A Heap-based Buffer Overflow vulnerability exists in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS . A malicious or compromised SDN-controller can send a crafted OVSDB message to trigger this flaw, potentially causing a complete outage of the OVSDB control plane or leading to remote...

EUVD-2026-101434

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-103994 Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

PT-2026-113966

🚨 CVE-2026-103994 A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution. 🎖@cveNotify...

CVE-2026-90105

A flaw was found in the Linux kernel's vxlan implementation. When arp/neighreduce attempts to read the neighbor hardware address neigh ha directly while it is being updated, it can result in partial reads. This data inconsistency can lead to unreliable network operations and potentially disrupt...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3187)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3187 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: add hook transactions for device deletions CVE-2026-63858 In the Linux kernel, the following...