CVE-2025-39850

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.17.0-rc2-virtme-g2a89cb21162c through 6.17.0-rc2-virtmne-g6ee90cb26014

Description A null pointer dereference (NPD) issue was identified in the vxlan module when using nexthop objects with the "proxy" option enabled. This occurs because the code incorrectly assumes a valid remote destination for FDB entries associated with FDB nexthop groups. Exploitation can be triggered by ARP requests and IPv6 Neighbor Solicitation messages, potentially leading to system instability.

Recommendations Linux kernel versions prior to 6.17.0-rc2-virtme-g2a89cb21162c and prior to 6.17.0-rc2-virtmne-g6ee90cb26014 should be updated.