CVE-2026-68299
kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the vmxnet3 virtual network device driver within the Linux kernel. When processing Geneve-encapsulated packets, the vmxnet3_get_hdr_len() function can incorrectly interpret header information, leading to a mismatch between expected and actual packet protocols or IP versions. This can trigger a BUG_ON condition, resulting in a kernel panic and a system crash, effectively causing a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-617 · Reachable Assertion