Linux Distros Unpatched Vulnerability : CVE-2026-74406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. udptunnelsockrelease could set sk-skuserdata to NULL while vxlangropreparereceive is running. Let...

Linux Distros Unpatched Vulnerability : CVE-2026-74474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: use pskbnetworkmaypull for transmit path header pulls In vxlanxmit, arpreduce, and vxlanmdbentryskbget, pskbmaypull was being called to verify the...

PT-2026-72975

In the Linux kernel, the following vulnerability has been resolved: qede: sync udp tunnel ports outside qede lock in the recovery path A TX timeout on a qede NIC that has VXLAN/GENEVE tunnel ports configured wedges the rtnetlink control plane of the whole machine: NETDEV WATCHDOG: ens6f1 qede:...

Linux Distros Unpatched Vulnerability : CVE-2026-74473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: use pskbnetworkmaypull in routeshortcircuit routeshortcircuit currently calls pskbmaypullskb, sizeofstruct iphdr or ipv6hdr, which checks if bytes are...

CVE-2026-68432

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...

CVE-2026-68432

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

DEBIAN-CVE-2026-68432

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

CVE-2026-68432

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

EUVD-2026-57040

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

CVE-2026-68432

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

CVE-2026-68432

Summary: CVE-2026-68432 affects the Linux kernel VXLAN implementation. The bug arises from an incorrect privilege check in the rtnl changelink path: a process with CAP_NET_ADMIN in its own network namespace can rewrite a VXLAN device whose underlay lives in a different namespace. The affected cod...

CVE-2026-68432

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

CVE-2026-68432 vxlan: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

CVE-2026-68432 vxlan: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

Linux Distros Unpatched Vulnerability : CVE-2026-68116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for...

Linux Distros Unpatched Vulnerability : CVE-2026-68432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns...

PT-2026-70946

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP NET ADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, dev netdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns...

CVE-2026-68116

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module, specifically within its Multicast Database MDB functionality. When an operation to replace the source list of an MDB remote entry fails, the system incorrectly deletes existing sources. This can lead to a situation where...

CVE-2026-68116

In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for deletion and vxlanmdbremotesrcsadd is then called to add the new source...

CVE-2026-68116

In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for deletion and vxlanmdbremotesrcsadd is then called to add the new source...