The vulnerability is a use‑after‑free bug in the Linux kernel’s VXLAN multicast domain backend when deleting a source that contains an all‑zeros address. Removing the entry frees the source structure and then attempts to delete it again, causing the kernel to dereference freed memory and raise a KASAN slab use‑after‑free fault. This kernel memory corruption can result in a crash or data corruption and could potentially be leveraged for further exploitation.

All Linux kernel releases that implement VXLAN and its multicast domain backend are affected, as the code path exists in the common kernel tree. The flaw is present before the patch that rejects the all‑zeros source address; any system running an unpatched kernel and exposing VXLAN MDB configuration interfaces is at risk on a per‑namespace basis.

Based on the description, the likely attack vector is local because the affected functions are netns‑scoped and can be invoked by an unprivileged user in a private user or network namespace. The CVSS score of 7.8 indicates high severity, while the EPSS score of <1% and absence from the CISA KEV catalog suggest that public exploitation has not yet been observed. The exploitability is modest, requiring only local access and the ability to manipulate VXLAN MDB entries, but it can lead to kernel crash or data corruption if successfully triggered.