In the Linux kernel, the following vulnerability has been resolved:
net: vxlan: prevent NULL deref in vxlan_xmit_one
Neither sock4 nor sock6 pointers are guaranteed to be non-NULL in vxlan_xmit_one, e.g. if the iface is brought down. This can lead to the following NULL dereference:
BUG: kernel NULL pointer dereference, address: 0000000000000010 Oops: Oops: 0000 [#1] SMP NOPTI RIP: 0010:vxlan_xmit_one+0xbb3/0x1580 Call Trace: vxlan_xmit+0x429/0x610 dev_hard_start_xmit+0x55/0xa0 __dev_queue_xmit+0x6d0/0x7f0 ip_finish_output2+0x24b/0x590 ip_output+0x63/0x110
Mentioned commits changed the code path in vxlan_xmit_one and as a side effect the sock4/6 pointer validity checks in vxlan(6)_get_route were lost. Fix this by adding back checks.
Since both commits being fixed were released in the same version (v6.7) and are strongly related, bundle the fixes in a single commit.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 24, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-6.17Upgrade linux-image-6.17.0-22-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.17.0-1012-awsUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.17.0-1020-oemUpgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-aws-6.17Upgrade linux-image-raspi-6.17Upgrade linux-image-raspiUpgrade linux-image-oem-24.04dUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-generic-64kUpgrade linux-image-generic-6.17Upgrade linux-image-oem-24.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-virtual-6.17Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oracle-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-gcp-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1013-azureUpgrade linux-image-awsUpgrade linux-image-realtime | Apr 17, 2026 | Dec 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 24, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub