CVE-2026-23293

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s VXLAN implementation. When the system boots with IPv6 disabled ('ipv6.disable=1'), the necessary network table (nd tbl) is not initialized, leading to a potential NULL pointer dereference within the neigh lookup() function when an IPv6 packet is received. This can result in a kernel panic, as indicated by a 'BUG: kernel NULL pointer dereference' message. The issue occurs during packet transmission via the vxlan xmit() function, triggered by calls to route shortcircuit() when processing IPv6 packets. The vulnerable function is neigh lookup().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.