CVE-2026-68116

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

vxlan: mdb: Fix source list corruption on a failed replace

When replacing the source list of an MDB remote entry, all existing

sources are first marked for deletion and vxlan_mdb_remote_srcs_add()

is then called to add the new source list. Sources present in the new

list have their deletion mark cleared, and any sources left marked

afterwards are removed.

If vxlan_mdb_remote_srcs_add() fails partway through, its error path

deletes all entries on the remote's source list. That rollback is only

correct for its other caller, vxlan_mdb_remote_add(), where the remote

was just allocated and the list contains solely entries added during

the call. On the replace path the list also holds pre-existing sources,

so a failed replace tears them down together with their (S, G)

forwarding entries instead of leaving the entry unchanged.

This is reachable from an existing (*, G) remote. An EXCLUDE filter

that loses sources starts fo

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References