CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them.

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN datagrams to bypass IPsec encryption and remove the protection against incoming cleartext VXLAN traffic. The condition is not logged by dockerd and persists until the encrypted…

10. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-115538