Medium [CVE-2026-92542] Docker: The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes
This medium-severity Docker advisory covers CVE-2026-92542 affecting Docker Engine, Docker Engine overlay network driver, Moby overlay network driver.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Docker CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec parameters which meets the following criteria:
- UDP datagram
- Destination port is the Swarm data-path port
- Datagram starts with a VXLAN header for the VNI of an encrypted overlay network which any running container on the node is connected to
Affected product named by the advisory: Docker.
Affected products named by the advisory: Docker Engine; Docker Engine overlay network driver; Moby overlay network driver.
- Docker Engine before 25.0.19
- Docker Engine 26.0.0 before 29.8.2
- Docker Engine overlay network driver before v25.0.19
- Docker Engine overlay network driver v26.0.0
- Moby overlay network driver v2.0.0-beta.0 before v2.0.0-beta.25
NVD record · high-confidence parse· fetched 1 day ago·verify at source
- 25.0.19
- 29.8.2
- v25.0.19
- v2.0.0-beta.25
NVD record · high-confidence parse· fetched 1 day ago·verify at source
Mitigation
Upgrade to a fixed release: 25.0.19, 29.8.2, v25.0.19, v2.0.0-beta.25. That is the remediation for this advisory.
The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.
NVD record · high-confidence parse· fetched 1 day ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.