---
id: CVE-2025-68353
title: 'net: vxlan: prevent NULL deref in vxlan_xmit_one'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: vxlan: prevent NULL deref in vxlan_xmit_one

  Neither sock4 nor sock6 pointers are guaranteed to be non-NULL in
  vxlan_xmit_one, e.g. if the iface is brought down. T…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 6f19b2c136d98a84d79030b53e23d405edfdc783 <
    333deb6b43c11d5bce00463b364ac993d2fa02a6
  - >-
    Linux >= 6f19b2c136d98a84d79030b53e23d405edfdc783 <
    4ac26aafdc8c7271414e2e7c0b2cb266a26591bc
  - >-
    Linux >= 6f19b2c136d98a84d79030b53e23d405edfdc783 <
    1f73a56f986005f0bc64ed23873930e2ee4f5911
  - Linux 6.7
published: '2025-12-24'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:38:14.894Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-68353'
references:
  - url: 'https://git.kernel.org/stable/c/333deb6b43c11d5bce00463b364ac993d2fa02a6'
  - url: 'https://git.kernel.org/stable/c/4ac26aafdc8c7271414e2e7c0b2cb266a26591bc'
  - url: 'https://git.kernel.org/stable/c/1f73a56f986005f0bc64ed23873930e2ee4f5911'
tags:
  - cve.org
epss: 0.00222
epssPercentile: 0.12682
ingestedAt: '2026-10-21T12:48:53.678Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: vxlan: prevent NULL deref in vxlan_xmit_one

Neither sock4 nor sock6 pointers are guaranteed to be non-NULL in
vxlan_xmit_one, e.g. if the iface is brought down. This can lead to the
following NULL dereference:

  BUG: kernel NULL pointer dereference, address: 0000000000000010
  Oops: Oops: 0000 [#1] SMP NOPTI
  RIP: 0010:vxlan_xmit_one+0xbb3/0x1580
  Call Trace:
   vxlan_xmit+0x429/0x610
   dev_hard_start_xmit+0x55/0xa0
   __dev_queue_xmit+0x6d0/0x7f0
   ip_finish_output2+0x24b/0x590
   ip_output+0x63/0x110

Mentioned commits changed the code path in vxlan_xmit_one and as a side
effect the sock4/6 pointer validity checks in vxlan(6)_get_route were
lost. Fix this by adding back checks.

Since both commits being fixed were released in the same version (v6.7)
and are strongly related, bundle the fixes in a single commit.

## Affected

- `Linux >= 6f19b2c136d98a84d79030b53e23d405edfdc783 < 333deb6b43c11d5bce00463b364ac993d2fa02a6`
- `Linux >= 6f19b2c136d98a84d79030b53e23d405edfdc783 < 4ac26aafdc8c7271414e2e7c0b2cb266a26591bc`
- `Linux >= 6f19b2c136d98a84d79030b53e23d405edfdc783 < 1f73a56f986005f0bc64ed23873930e2ee4f5911`
- `Linux 6.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.