CVE-2026-74473

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the VXLAN implementation where the route shortcircuit() function incorrectly uses pskb may pull() to verify the availability of bytes for the IP header. Because skb->data points to the MAC header in vxlan xmit(), the check fails to account for the network offset, potentially leaving parts of the IP header in non-linear fragments. This can lead to an out-of-bounds read when dereferencing ip hdr(skb)->daddr beyond the linear buffer length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.