Riskcovery

CVE-2026-90105

vxlan: fix reading neigh ha

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 30, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

vxlan: fix reading neigh ha

Currently arp/neigh_reduce read neigh ha directly which can lead to partial reads while the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address similar to route_shortcircuit which already does the right thing.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e4f67addf158f98f8197e08974966b18480dc751 to before a1e86c5b4463178751a9fd3f0a3876a602dc360cAffected
  • e4f67addf158f98f8197e08974966b18480dc751 to before 6093baf2b2c57e7da33bacd2223570a78b416d89Affected
  • e4f67addf158f98f8197e08974966b18480dc751 to before 751cb520f9e47538b7223df133806a29fc41f54fAffected
  • e4f67addf158f98f8197e08974966b18480dc751 to before f43ef9a3f9c121472a0754c9e9bff13317ace0f7Affected
  • e4f67addf158f98f8197e08974966b18480dc751 to before ecc8bac11a101e5f6989a14b92e17b51f9761630Affected
  • e4f67addf158f98f8197e08974966b18480dc751 to before b824059a673b2283e78c7aae2c7d257aad7f0e1dAffected
LinuxLinux
  • 3.8Affected
  • before 3.8Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.