CVE-2026-74615

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the VXLAN driver. The vxlan changelink() function arms the vxlan->age timer whenever the requested ageing interval differs from the configured one, without verifying if the device is running via a netif running() test. Consequently, the timer can be armed on a device that was never brought up. Because netif close many() drops devices without the IFF UP flag before dev close many() runs, the synchronous cancellation of the timer in vxlan stop() is skipped. When free netdev() releases the allocation containing the timer while it is still queued, the timer core may write through the freed object's list pointers during expire timers(). This condition can be triggered by an unprivileged user within a new user and network namespace using netns-scoped rtnl operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.