Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never initialized because inet6_init() exits before ndisc_init() is called which initializes it. If an IPv6 packet is injected into the interface, route_shortcircuit() is called and a NULL pointer dereference happens on neigh_lookup(). BUG: kernel NULL pointer dereference, address: 0000000000000380 Oops: Oops: 0000 [#1] SMP NOPTI [...] RIP: 0010:neigh_lookup+0x20/0x270 [...] Call Trace: <TASK> vxlan_xmit+0x638/0x1ef0 [vxlan] dev_hard_start_xmit+0x9e/0x2e0 __dev_queue_xmit+0xbee/0x14e0 packet_sendmsg+0x116f/0x1930 __sys_sendto+0x1f5/0x200 __x64_sys_sendto+0x24/0x30 do_syscall_64+0x12f/0x1590 entry_SYSCALL_64_after_hwframe+0x76/0x7e Fix this by adding an early check on route_shortcircuit() when protocol is ETH_P_IPV6. Note that ipv6_mod_enabled() cannot be used here because VXLAN can be built-in even when IPv6 is built as a module.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-26 | 1 | Disclosure1 |
| 2026-03-31 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-23293 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23293 #CVE-2026-23293 #CVE #CyberSecurity #InfoSec https://t.co/pD37rzkKKW
Post summary
The tweet announces CVE-2026‑23293 and provides a link to the NVD entry but lacks any technical details, exploit code, or patch information.
🧨 Linux kernel crash via VXLAN when IPv6 is disabled? Cool cool cool. This is what happens when “optional” networking features meet NULL pointers. Fix it. https://windowsforum.com/threads/cve-2026-23293-vxlan-crash-via-ipv6-disabled-boot-null-ptr-in-route_shortcircuit.407492/ #LinuxKernel #Vxlan #Ipv6Disabled #Cve202623293 https://t.co/rPAQ9MdUt0
Post summary
The thread describes a kernel crash caused by a null pointer in VXLAN when IPv6 is disabled, but it offers no PoC, exploit, or patch information.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |