CyberRota Analysis
AI-GeneratedA use-after-free vulnerability exists in the Linux kernel's vxlan module due to improper handling of the Ethernet header pointer after the route_shortcircuit() function is called, which can lead to dereferencing freed memory. This flaw could potentially allow an attacker to execute arbitrary code or cause a denial of service. Organizations using affected versions of the Linux kernel should prioritize patching this vulnerability to mitigate risks associated with memory corruption.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after route_shortcircuit() Before route_shortcircuit(), the eth header pointer is cached from eth_hdr(skb). Inside route_shortcircuit(), pskb_may_pull() can be called, which may reallocate skb->head. In this case, returning to vxlan_xmit() leaves the cached eth pointer pointing to freed memory, leading to a use-after-free when dereferencing eth->h_dest. Fix this by updating eth = eth_hdr(skb) after calling route_shortcircuit().