Unrated severityNVD Advisory· Published Sep 17, 2026· Updated Oct 30, 2026

CVE-2026-90105

Description

In the Linux kernel, the following vulnerability has been resolved:

vxlan: fix reading neigh ha

Currently arp/neigh_reduce read neigh ha directly which can lead to partial reads while the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address similar to route_shortcircuit which already does the right thing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords2 versions
pkg:linux/kernel pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
>= 3.8.0, < 6.1.191+ 1 more
- (no CPE)range: >= 3.8.0, < 6.1.191
- (no CPE)range: < 7.2.7-1.1
Linux/Kernelllm-fuzzy

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/6093baf2b2c57e7da33bacd2223570a78b416d89nvd
git.kernel.org/stable/c/751cb520f9e47538b7223df133806a29fc41f54fnvd
git.kernel.org/stable/c/a1e86c5b4463178751a9fd3f0a3876a602dc360cnvd
git.kernel.org/stable/c/b824059a673b2283e78c7aae2c7d257aad7f0e1dnvd
git.kernel.org/stable/c/ecc8bac11a101e5f6989a14b92e17b51f9761630nvd
git.kernel.org/stable/c/f43ef9a3f9c121472a0754c9e9bff13317ace0f7nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000