CVE-2026-31738

vxlan: validate ND option lengths in vxlan_na_create

published May 1, 2026

CVSS
—
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

vxlan: validate ND option lengths in vxlan_na_create

vxlan_na_create() walks ND options according to option-provided

lengths. A malformed option can make the parser advance beyond the

computed option span or use a too-short source LLADDR option payload.

Validate option lengths against the remaining NS option area before

advancing, and only read source LLADDR when the option is large enough

for an Ethernet address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.2th percentile
Published
2026-05-01T14:14Z
EPSS history
Timeline
  • 01 MAY 14:14Z
    vxlan: validate ND option lengths in vxlan_na_create
    cvelistv5