CVE-2026-90105

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-09-17 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: vxlan: fix reading neigh ha Currently arp/neigh_reduce read neigh ha directly which can lead to partial reads while the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address similar to route_shortcircuit which already does the right thing.

Affected Software (7)

VendorProductVersion
Linux Linux e4f67addf158f98f8197e08974966b18480dc751 < a1e86c5b4463178751a9fd3f0a3876a602dc360c
Linux Linux e4f67addf158f98f8197e08974966b18480dc751 < 6093baf2b2c57e7da33bacd2223570a78b416d89
Linux Linux e4f67addf158f98f8197e08974966b18480dc751 < 751cb520f9e47538b7223df133806a29fc41f54f
Linux Linux e4f67addf158f98f8197e08974966b18480dc751 < f43ef9a3f9c121472a0754c9e9bff13317ace0f7
Linux Linux e4f67addf158f98f8197e08974966b18480dc751 < ecc8bac11a101e5f6989a14b92e17b51f9761630
Linux Linux e4f67addf158f98f8197e08974966b18480dc751 < b824059a673b2283e78c7aae2c7d257aad7f0e1d
Linux Linux 3.8

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.21%
Raw Score 0.002150
Percentile 11.9%
Date 2026-10-31

EPSS Trend

2026-10-31
0.00215
2026-10-30
0.00209
2026-10-29
0.00209

Intelligence Sources

mitre ref →
nvd ref →