In the Linux kernel, the following vulnerability has been resolved:
net: vxlan: prevent NULL deref in vxlan_xmit_one
Neither sock4 nor sock6 pointers are guaranteed to be non-NULL in vxlan_xmit_one, e.g. if the iface is brought down. This can lead to the following NULL dereference:
BUG: kernel NULL pointer dereference, address: 0000000000000010 Oops: Oops: 0000 [#1] SMP NOPTI RIP: 0010:vxlan_xmit_one+0xbb3/0x1580 Call Trace: vxlan_xmit+0x429/0x610 dev_hard_start_xmit+0x55/0xa0 __dev_queue_xmit+0x6d0/0x7f0 ip_finish_output2+0x24b/0x590 ip_output+0x63/0x110
Mentioned commits changed the code path in vxlan_xmit_one and as a side effect the sock4/6 pointer validity checks in vxlan(6)_get_route were lost. Fix this by adding back checks.
Since both commits being fixed were released in the same version (v6.7) and are strongly related, bundle the fixes in a single commit.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 24, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-6.17Upgrade linux-image-virtualUpgrade linux-image-6.17.0-1013-azureUpgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-gcp-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-awsUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-1020-oemUpgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-22-genericUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-azure-6.17Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-raspi-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-6.17.0-1012-awsUpgrade linux-image-realtime-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-aws-6.17Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.17Upgrade linux-image-generic | Apr 17, 2026 | Dec 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub