CVE-2026-80838

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the VXLAN implementation where a filtered bulk flush of the Forwarding Database (FDB) can lead to an invalid pointer. This occurs when the vxlan fdb dst destroy() function unlinks the last remote before vxlan flush() destroys the parent FDB entry. During this interval, an RCU (Read-Copy-Update) reader can access the parent, causing the first remote rcu() function to apply list entry rcu() to an empty list head. This results in an invalid remote pointer that the receive learning path can read from and write to.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.