In the Linux kernel's VXLAN implementation, a flaw in the handling of forwarding database (FDB) flushes allows a filtered bulk flush to unlink the last remote entry prematurely. During this period an RCU reader can access the now-empty list, producing an invalid pointer that the receive learning path may read from and write to. This mismanagement can corrupt kernel memory and may cause the system to crash, effectively creating a denial of service on a vulnerable host. The weakness corresponds to the classic use‑after‑free flaw (CWE‑416). No patch or workaround is provided in the advisory, so the impact is strictly limited to the kernel code paths that perform the flushing logic.

The defect resides entirely in the Linux kernel; any distribution that ships the standard vxlan module before the commit that fixed this bug is affected. No specific version matrix is supplied, so all kernels that include the unpatched vxlan implementation are considered vulnerable. The issue is located in the vxlan_fdb_dst_destroy() and vxlan_flush() functions, which are part of the core networking stack.

The CVSS score is not specified in the advisory; the EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog. Based on the description it is inferred that an attacker would need to deliver specially crafted VXLAN packets to trigger the faulty flush logic. If successful, the resulting kernel memory corruption could crash the system. Because the required conditions involve low‑level networking primitives and the bug is in kernel code, the likelihood of exploitation is moderate and it may be limited to environments that expose VXLAN interfaces to untrusted traffic.