9.8

CVE-2026-74474

vxlan: use pskb_network_may_pull() for transmit path header pulls

In the Linux kernel, the following vulnerability has been resolved:

vxlan: use pskb_network_may_pull() for transmit path header pulls

In vxlan_xmit(), arp_reduce(), and vxlan_mdb_entry_skb_get(), pskb_may_pull() was
being called to verify the availability of network layer headers (ARP, IPv6/ND,
IP/IPv6 MDB keys).

However, during transmit skb->data points to the MAC header, so skb_network_offset(skb)
is ETH_HLEN (14 bytes). Using pskb_may_pull(skb, len) only checks len bytes from skb->data
rather than skb_network_offset(skb) + len, which can leave part of the network header
in non-linear frags.

Replace these remaining pskb_may_pull() calls with pskb_network_may_pull() to properly
account for the MAC header offset.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e4f67addf158f98f8197e08974966b18480dc751
Version < bb01c51950c3ff3c76acdd54b85ab38ccc2a8bb4
Status affected
Version e4f67addf158f98f8197e08974966b18480dc751
Version < 6146901881f09ef063eb34ad389f63231f8486f5
Status affected
Version e4f67addf158f98f8197e08974966b18480dc751
Version < 94dee751aad627b3645d424b5d0c736d394573e9
Status affected
Version e4f67addf158f98f8197e08974966b18480dc751
Version < 7076a34b6e33315dc160b4612bfea1c597495585
Status affected
Version e4f67addf158f98f8197e08974966b18480dc751
Version < b9553558b48db54ac9273e6b98d7263ef5c1a329
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.8
Status affected
Version 0
Version < 3.8
Status unaffected
Version <= 6.6.*
Version 6.6.153
Status unaffected
Version <= 6.12.*
Version 6.12.105
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.44% 0.368
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/94dee751aad627b3645d424b5d0c736d394573e9
https://git.kernel.org/stable/c/7076a34b6e33315dc160b4612bfea1c597495585
https://git.kernel.org/stable/c/b9553558b48db54ac9273e6b98d7263ef5c1a329
https://git.kernel.org/stable/c/6146901881f09ef063eb34ad389f63231f8486f5
https://git.kernel.org/stable/c/bb01c51950c3ff3c76acdd54b85ab38ccc2a8bb4