CVE-2026-74475: vxlan: use neigh_ha_snapshot() in route_shortcircuit()
In the Linux kernel, the following vulnerability has been resolved:
vxlan: use neighhasnapshot() in routeshortcircuit()
The neighbour hardware address n->ha can be updated asynchronously by the neighbour subsystem, protected by n->halock seqlock. Reading n->ha without holding the seqlock loop can lead to torn reads or reading a partially updated MAC address.
Use neighhasnapshot() in routeshortcircuit() to safely copy n->ha under readseqbegin()/readseqretry() lock protection before using it.
Note that arpreduce() and neighreduce() seem to have the same issue left for future patches.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74475?
CVE-2026-74475 has a risk rating of 15.
How does CVE-2026-74475 affect Linux kernel performance?
CVE-2026-74475 can lead to possible inconsistencies in neighbor hardware address updates, potentially affecting network performance.
Is CVE-2026-74475 exploitable remotely?
CVE-2026-74475 may not be directly exploitable remotely but could allow for denial of service if exploited in specific conditions.
How do I fix CVE-2026-74475?
To fix CVE-2026-74475, update to the latest version of the Linux kernel where the vulnerability has been patched.
What versions of the Linux kernel are affected by CVE-2026-74475?
CVE-2026-74475 affects specific older versions of the Linux kernel prior to the patch release.