CVE-2026-90105

Summary

In the Linux kernel, the following vulnerability has been resolved:

vxlan: fix reading neigh ha

Currently arp/neigh_reduce read neigh ha directly which can lead to partial reads while the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address similar to route_shortcircuit which already does the right thing.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe4f67addf158f98f8197e08974966b18480dc751 < ecc8bac11a101e5f6989a14b92e17b51f9761630affected
LinuxLinuxe4f67addf158f98f8197e08974966b18480dc751 < b824059a673b2283e78c7aae2c7d257aad7f0e1daffected
LinuxLinux3.8affected
LinuxLinux0 < 3.8unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References