CVE-2025-38037

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description The issue is related to data races in the vxlan module of the Linux kernel. Specifically, the used and updated fields in the FDB entry structure can be accessed concurrently by multiple threads, leading to potential data corruption. This can be reproduced using a specific script. The problem is resolved by annotating these accesses using READ ONCE() / WRITE ONCE().

Recommendations For Linux kernel versions prior to the fixed version, consider applying the patch that annotates the used and updated fields in the FDB entry structure using READ ONCE() / WRITE ONCE(). As a temporary workaround, consider restricting concurrent access to the vxlan module to minimize the risk of data corruption.