Linux Kernel Vulnerability in VXLAN Affecting Multiple Versions

CVE-2026-80681

What is CVE-2026-80681?

A vulnerability exists in the Linux kernel's VXLAN implementation, where an eth header pointer is cached before a routing decision is made. If the routing logic requires reallocating the socket buffer memory, this can lead to the cached pointer referencing freed memory. Consequently, when the pointer is later dereferenced, it risks accessing invalid memory, resulting in a use-after-free condition. This flaw has been addressed by ensuring the eth header is re-fetched after the routing process, thereby preventing potential exploitation.

References