Riskcovery

CVE-2026-90106

net: bridge: arp/nd proxy: fix reading neigh ha

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 30, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: arp/nd proxy: fix reading neigh ha

Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 057658cb33fbf4d4309f01fe8845903b1cd07fad to before 2365b25b4add42bb5f652920b45bc9ad0e35cbc7Affected
  • 057658cb33fbf4d4309f01fe8845903b1cd07fad to before 490c72868443ff90f47f4ccbaaff1eaf8fed46abAffected
  • 057658cb33fbf4d4309f01fe8845903b1cd07fad to before a178bcb01051688fb085ffb72cc4b13b5df0fc0fAffected
  • 057658cb33fbf4d4309f01fe8845903b1cd07fad to before 884cbf15ccd3980bcc9583073045f91798a86d4eAffected
  • 057658cb33fbf4d4309f01fe8845903b1cd07fad to before 291c9e137b7c74e8a512cded4845352da4c4addaAffected
  • 057658cb33fbf4d4309f01fe8845903b1cd07fad to before 57549ab9079122991dfa0f8248ca00e101e8e69bAffected
LinuxLinux
  • 4.15Affected
  • before 4.15Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.