CVE-2026-90105: vxlan: fix reading neigh ha
Published Sep 17, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
vxlan: fix reading neigh ha
Currently arp/neighreduce read neigh ha directly which can lead to partial reads while the neigh is being updated. Use neighhasnapshot to take a stable snapshot of the address similar to routeshortcircuit which already does the right thing.
Event History
Sep 17, 2026
CVE Published
via MITRE·04:06 PM
Data Sourced
via MITRE·04:06 PM
Description
Frequently Asked Questions
1
What condition is required for the issue to occur?
The problem can occur when VXLAN reads a neighbour hardware address while that neighbour entry is being updated. Direct reads can observe a partially updated address.
2
What is the mitigation if the fix cannot be applied immediately?
No workaround or configuration-based mitigation is provided in the available information. The documented fix is to use neigh_ha_snapshot so the address is read as a stable snapshot.