CVE-2026-90106: net: bridge: arp/nd proxy: fix reading neigh ha
Published Sep 17, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: bridge: arp/nd proxy: fix reading neigh ha
Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neighhasnapshot to take a stable snapshot of the address.
Affected Software
1 affected component
Linux Kernel
Event History
Sep 17, 2026
CVE Published
via MITRE·04:06 PM
Data Sourced
via MITRE·04:06 PM
Description
Frequently Asked Questions
1
Which deployments should be prioritized for review?
Linux Kernel deployments using bridge ARP/ND proxy functionality should be prioritized. The available data does not identify affected kernel versions or whether this functionality is enabled by default.
2
Where can maintainers find the fixes to evaluate or backport?
The provided stable-kernel references contain the relevant fixes: commits 291c9e137b7c74e8a512cded4845352da4c4adda and 57549ab9079122991dfa0f8248ca00e101e8e69b.