CVE-2026-68116

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vxlan mdb component where replacing the source list of an MDB remote entry can lead to source list corruption if the process fails. During a replace operation, existing sources are marked for deletion before vxlan mdb remote srcs add() is called to add new sources. If vxlan mdb remote srcs add() fails, the error path incorrectly deletes all entries on the remote's source list, including pre-existing sources and their (S, G) forwarding entries. This can be triggered from an existing (*, G) remote, causing EXCLUDE filters to forward traffic that should be blocked or INCLUDE filters to drop traffic that should be forwarded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.