Skip to content
Heist/ feed
High

vxlan: mdb: Fix source list corruption on a failed replace

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for deletion and vxlan_mdb_remote_srcs_add() is then called to add the new source list. Sources present in the new list have their deletion mark cleared, and any sources left marked afterwards are removed. If vxlan_mdb_remote_srcs_add() fails partway through, its error path deletes all entries on the remote's source list. That rollback is only correct for its other caller, vxlan_mdb_remote_add(), where the remote was just allocated and the list contains solely entries added during the call. On the replace path the list also holds pre-existing sources, so a failed replace tears them down together with their (S, G) forwarding entries instead of leaving the entry unchanged. This is reachable from an existing (*, G) remote. An EXCLUDE filter that loses sources starts forwarding traffic that should be blocked, while an INCLUDE filter that loses sources drops traffic that should be forwarded. Mark entries created during the current pass with a new VXLAN_SGRP_F_NEW flag. On failure, delete only those entries and clear the deletion mark on the pre-existing ones, so a failed replace leaves the source list untouched. Retain the flag until the whole operation succeeds and then clear it. Also stop vxlan_mdb_remote_src_add() from deleting a pre-existing entry it only looke

Announced Source revision 1
Original source ↗

CVE-2026-68116

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-68116

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "a3a48de5eade770e911d35291217bdd69ce04ef1",
        "lessThan": "5bc8fc1d2ff802eec839e03adef5df597421898d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a3a48de5eade770e911d35291217bdd69ce04ef1",
        "lessThan": "2c54dff57606590fa4abec46bab6bea3133f1539",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a3a48de5eade770e911d35291217bdd69ce04ef1",
        "lessThan": "79370b573e92e8f190eb5f9a511fa5398340d8b2",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a3a48de5eade770e911d35291217bdd69ce04ef1",
        "lessThan": "54a3c27b357dfb34f327f89bfadeb998bef8051e",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a3a48de5eade770e911d35291217bdd69ce04ef1",
        "lessThan": "dcd9b465965422b9654f6026e8a2fa8984f74c3c",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/vxlan/vxlan_mdb.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.4"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.4",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "6.6.148",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.101",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.42",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.1.6",
        "versionType": "semver",
        "lessThanOrEqual": "7.1.*"
      },
      {
        "status": "unaffected",
        "version": "7.2",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/vxlan/vxlan_mdb.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-68116

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#41120 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement