Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-89776 Details

Description

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter entry policy declares the GROUP/GROUP6 address attributes as NLA_BINARY with only a maximum length, so validate_nla() accepts a payload shorter than the address. The GROUP consumer reads it with nla_get_in_addr(), an unconditional 4-byte load, so a short attribute over-reads up to 3 bytes of uninitialised slab data, which are stored into remote_ip and echoed back via RTM_GETTUNNEL, disclosing kernel memory. Switch both entries to NLA_POLICY_EXACT_LEN() so the validator rejects any GROUP/GROUP6 that is not exactly 4 / 16 bytes; a valid address is always sent at full width.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/47bfcc871576eaef6c8edab6749acd4b317306ea	kernel.org
https://git.kernel.org/stable/c/984f831dda31b3a18f47454cf64989f65402879e	kernel.org
https://git.kernel.org/stable/c/a9ec10815199f9879ba080241dc555efb1daf324	kernel.org
https://git.kernel.org/stable/c/ad32e564c62ebf5ba76dd60a22af52c69d54d17b	kernel.org
https://git.kernel.org/stable/c/daebc7064a1b4c12c98e52c4bceede7f2fcd573c	kernel.org
https://git.kernel.org/stable/c/e12c4663529699f457b2988c1dfedf4d13b3b3be	kernel.org

see all 6 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes