CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel affects the vxlan implementation, where reusing a cached IP header after the skb_tunnel_check_pmtu() function can lead to a use-after-free (UAF) condition. This critical flaw, with a CVSS score of 9.8, could allow attackers to execute arbitrary code or crash the system, posing significant risks to system integrity and availability. Organizations using Linux-based systems, particularly those leveraging vxlan for network virtualization, should prioritize patching this vulnerability to mitigate potential exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() skb_tunnel_check_pmtu() can change skb->head. Reusing old_iph afer skb_tunnel_check_pmtu() can cause an UAF. Use instead ip_hdr(skb) as done in drivers/net/bareudp.c and drivers/net/geneve.c. Found by Sashiko.