{"id":17342,"date":"2026-09-05T02:31:00","date_gmt":"2026-09-04T18:31:00","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80838"},"modified":"2026-09-05T02:31:00","modified_gmt":"2026-09-04T18:31:00","slug":"cve-2026-80838","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80838","title":{"rendered":"CVE-2026-80838 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: keep the last"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>vxlan: keep the last remote linked during FDB flush<\/p>\n<p>A non-nexthop FDB entry is expected to have at least one remote while it<br \/>\nremains reachable through the FDB hash table. A filtered bulk flush<br \/>\nviolates this invariant when every remote matches: It unlinks the last<br \/>\nremote in vxlan_fdb_dst_destroy() and only afterwards tells vxlan_flush()<br \/>\nto destroy the parent FDB entry.<\/p>\n<p>An RCU reader can find the parent during this interval.<br \/>\nfirst_remote_rcu() then applies list_entry_rcu() to the empty list head,<br \/>\nproducing an invalid remote pointer that the receive learning path can<br \/>\nread from and write to.<\/p>\n<p>When a matching remote is the sole remaining remote, leave it linked and<br \/>\nask the caller to destroy the entire FDB entry. vxlan_fdb_destroy() keeps<br \/>\nthe remote attached while sending the deletion notification and removing<br \/>\nthe parent from the lookup structures.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>vxlan: keep the last remote linked during FDB flush<\/p>\n<p>A non-nexthop FDB entry is expected to have at least one remote while it<br \/>\nremai<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-17342","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/17342","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17342"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17342"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}