CVE-2022-50405

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the VXLAN implementation when deleting a VXLAN device during packet reception. This can lead to a NULL pointer dereference within the vxlan ecn decapsulate() function if the socket is released after vxlan sock is obtained from sk user data. The issue occurs when deleting a VXLAN device while packets are being received, potentially leading to system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.