AZL-90807
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-90807.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-90807
- Upstream
- Published
- 2026-06-25T09:16:39Z
- Modified
- 2026-08-28T17:48:11.794231857Z
- Summary
- CVE-2026-53221 affecting package kernel for versions less than 6.6.143.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ip6vti: fix incorrect tunnel matching in vti6tnl_lookup()
In vti6tnllookup(), when an exact match for a tunnel fails, the code falls back to searching for wildcard tunnels:
Tunnels matching the packet's local address, with any remote address wildcard remote).
Tunnels matching the packet's remote address, with any local address (wildcard local).
However, vti6 stores all these different types of tunnels in the same hash table (ip6n->tnlsrl) prone to hash collisions.
The bug is that the fallback search loops in vti6tnllookup() were missing checks to ensure that the candidate tunnel actually has a wildcard address.
- References