CVE-2026-74474

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the VXLAN implementation where pskb may pull() was used instead of pskb network may pull() to verify the availability of network layer headers, such as ARP, IPv6/ND, and IP/IPv6 MDB keys. During transmission, the skb->data pointer refers to the MAC header, meaning the network offset is 14 bytes. Because pskb may pull() only checks the length from skb->data and does not account for the network offset, parts of the network header may remain in non-linear fragments. This affects the vxlan xmit(), arp reduce(), and vxlan mdb entry skb get() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.