CVE-2025-39850

vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects

References

Notes

 carnil> Introduced in 1274e1cc4226 ("vxlan: ecmp support for mac fdb entries").
 carnil> Vulnerable versions: 5.8.

Bugs

Status

Branch Status
upstream released (6.17-rc5) [1f5d2fd1ca04a23c18b1bde9a43ce2fa2ffa1bce]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.16-upstream-stable released (6.16.6) [8cfa0f076842f9b3b4eb52ae0e41d16e25cbf8fa]
6.12-upstream-stable released (6.12.46) [e211e3f4199ac829bd493632efcd131d337cba9d]
6.6-upstream-stable needed
6.1-upstream-stable needed
5.10-upstream-stable needed
sid released (6.16.6-1)
6.12-trixie-security released (6.12.48-1)
6.1-bookworm-security needed
5.10-bullseye-security needed