CVE-2026-98122

In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlanmdbremotesrcdel vxlanmdbisvalidsource, which validates MDBEATTRSOURCE and every MDBEATTRSRCLIST member, accepts the all-zeros address. A source list is only accepted on a , G entry, whose...

CVE-2026-98122

The Linux kernel contains a use-after-free vulnerability in the vxlan module within the vxlan_mdb_remote_src_del() function. The root cause is that vxlan_mdb_is_valid_source() incorrectly accepts the all-zeros address , leading to aliased keys. This allows the first call to free the entry while t...

EUVD-2026-86953

In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlanmdbremotesrcdel vxlanmdbisvalidsource, which validates MDBEATTRSOURCE and every MDBEATTRSRCLIST member, accepts the all-zeros address. A source list is only accepted on a , G entry, whose...