CVE-2026-80681

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the vxlan module. The problem occurs when the eth header pointer is cached from eth hdr(skb) before calling route shortcircuit(). Because route shortcircuit() may call pskb may pull(), the skb->head can be reallocated. Consequently, the cached eth pointer in vxlan xmit() points to freed memory, which is then dereferenced via eth->h dest.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.