CVE-2026-98122: Linux 6.4

Affected technology

Linux · a3a48de5eade770e911d35291217bdd69ce04ef1 to before 069d5527bb0f229e528fa88c6b72f15060c373f2, a3a48de5eade770e911d35291217bdd69ce04ef1 to before e12c903fd13c6261b98ca18d8f70ac26e739e2f8, a3a48de5eade770e911d35291217bdd69ce04ef1 to before 74e2a56c82209b0335b53e25f19f9b0590e2483d, a3a48de5eade770e911d35291217bdd69ce04ef1 to before 71203a41d6fa2fa0ea2f3a7541987958bd3694fd, a3a48de5eade770e911d35291217bdd69ce04ef1 to before 4aa61c88b4e292e10abdfd791334b8272108d68a
Linux

Linux · 6.4
Linux

Component: Not specified by the source
File: drivers/net/vxlan/vxlan_mdb.c, tools/testing/selftests/net/test_vxlan_mdb.sh

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source says bUG: KASAN: slab-use-after-free in __vxlan_mdb_add+0x1cd/0xd70 Read of size 8 at addr ffff888102852500 by task poc/84 __vxlan_mdb_add+0x1cd/0xd70 vxlan_mdb_add+0xc0/0x140 rtnl_mdb_add+0x157/0x2a0 rtnetlink_rcv_msg+0x207/0x5a0 Allocated by task 84: __kmalloc_cache_noprof+0x153/0x360 vxlan_mdb_remote_srcs_add+0x2eb/0x440 __vxlan_mdb_add+0x803/0xd70 Freed by task 84: kfree+0x14c/0x3b0 vxlan_mdb_remote_del+0x129/0x1a0 __vxlan_mdb_del+0x4f/0xe0 vxlan_mdb_remote_src_fwd_del.isra.0+0x162/0x1b0 __vxlan_mdb_add+0x1c5/0xd70 The MDB operations are netns-scoped, so an unprivileged user can perform them in a new user and network namespace. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.