The Linux kernel contains a null pointer dereference in the function vxlan_gro_prepare_receive. When udp_tunnel_sock_release clears sk->sk_user_data while vxlan_gro_prepare_receive is active, the kernel may attempt to dereference a NULL pointer, causing a crash. This vulnerability leads to a loss of availability on the affected host, potentially interrupting services that depend on the kernel’s networking stack.

All Linux kernel builds prior to the application of the fix are susceptible. The vendor name listed is Linux, and the CPE indicates the generic Linux kernel. No specific package versions are provided in the CNA data, so any kernel release lacking the patch is considered affected.

The CVSS score of 9.8 indicates critical severity. The EPSS score is <1%, suggesting a low probability of exploitation, but the criticality warrants attention. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is through crafted VXLAN packets passed over a UDP tunnel. The attack may require privileged or compromised network access to inject traffic into the VXLAN interface, but no exploitation proof is documented in the CVE references.