{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/products/vmxnet3/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-68299"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["vmxnet3"],"_cs_severities":["medium"],"_cs_tags":["denial-of-service","kernel","infrastructure"],"_cs_type":"advisory","_cs_vendors":["VMware"],"content_html":"\u003cp\u003eCVE-2026-68299 describes a kernel-level vulnerability within the vmxnet3 virtual network driver. The issue resides in the vmxnet3_get_hdr_len() function, which fails to correctly handle specific Geneve (Generic Network Virtualization Encapsulation) packets. When a malformed or specific crafted packet is received, the driver triggers a kernel BUG_ON condition. Because this occurs within the kernel context, it results in an immediate system crash and denial of service for the affected virtual machine. This vulnerability primarily impacts virtualized environments relying on the vmxnet3 driver for network connectivity in virtualized network overlays that utilize Geneve encapsulation. There is no evidence of remote code execution, but the ease of triggering a system-wide crash via crafted network traffic makes this a relevant availability concern for infrastructure administrators.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability results in a system crash, causing a denial of service for any virtual machine utilizing the vulnerable vmxnet3 driver. This impacts stability in data center environments, particularly those utilizing virtual network overlays or SDN (Software Defined Networking) solutions that leverage Geneve encapsulation.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize the deployment of the kernel patch provided by the vendor.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eReview virtualization host and guest kernel logs for kernel panics or BUG_ON events associated with vmxnet3 to identify potential exploitation attempts or accidental triggers.\u003c/li\u003e\n\u003cli\u003eMonitor network traffic for anomalous Geneve encapsulated packets directed at high-uptime virtual assets.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-11T10:36:20Z","date_published":"2026-08-11T10:36:20Z","id":"https://feed.craftedsignal.io/briefs/2026-08-vmxnet3-denial-of-service/","summary":"CVE-2026-68299 is a kernel-level denial of service vulnerability in the vmxnet3 virtual network driver caused by a BUG_ON condition when processing malformed Geneve-encapsulated packets.","title":"Kernel Denial of Service Vulnerability in vmxnet3 Driver","url":"https://feed.craftedsignal.io/briefs/2026-08-vmxnet3-denial-of-service/"}],"language":"en","title":"CraftedSignal Threat Feed - Vmxnet3","version":"https://jsonfeed.org/version/1.1"}