A critical race condition in the Linux kernel VXLAN driver could be exploited by an unauthenticated attacker to cause system instability or unauthorized memory access.

The vulnerability occurs because the VXLAN driver accesses neighbor hardware addresses without holding the required seqlock, leading to a race condition that can be triggered by an unauthenticated remote attacker.

Successful exploitation of this race condition could lead to kernel panics, resulting in service denial, or potentially allow for memory corruption that facilitates further attacks. With a CVSS score of 10.0, the risk of system-wide compromise or prolonged downtime is extremely high.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.151, or later.

Proactive Monitoring: Review system logs for kernel oops or unexpected service restarts that may indicate triggered race conditions.

Compensating Controls: Use kernel self-protection features and limit exposure of VXLAN endpoints to untrusted networks where possible.

Public Exploit Available: Unknown

Administrators must treat this vulnerability as high priority given the potential for kernel-level impact. Applying the latest stable kernel updates is the only definitive way to address the locking deficiency and ensure system stability.