Threats tagged 'ghsa-vcqm-xvp9-x4jq'

A vulnerability in the Linux kernel's VXLAN driver allows dynamic forwarding database (FDB) entries referencing nexthop IDs to be configured with the dynamic flag, leading to potential list corruption and use-after-free errors. This occurs because the per-nexthop FDB list is not sufficiently protected against concurrent modifications when multiple VXLAN devices share the same FDB nexthop. The issue has been fixed by rejecting such dynamic FDB entries and ensuring list mutations occur under proper locking.