---
id: CVE-2026-90105
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  vxlan: fix reading neigh ha

  Currently arp/neigh_reduce read neigh ha directly which can lead to
  partial reads while the neigh is being updated
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  vxlan: fix reading neigh ha

  Currently arp/neigh_reduce read neigh ha directly which can lead to
  partial reads while the neigh is being updated. Use neigh_ha_snapshot t…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e4f67addf158f98f8197e08974966b18480dc751 <
    ecc8bac11a101e5f6989a14b92e17b51f9761630
  - >-
    Linux >= e4f67addf158f98f8197e08974966b18480dc751 <
    b824059a673b2283e78c7aae2c7d257aad7f0e1d
  - Linux 3.8
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:02.350'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-90105'
references:
  - url: 'https://git.kernel.org/stable/c/b824059a673b2283e78c7aae2c7d257aad7f0e1d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ecc8bac11a101e5f6989a14b92e17b51f9761630'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.888Z'
epss: 0.00198
epssPercentile: 0.08504
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

vxlan: fix reading neigh ha

Currently arp/neigh_reduce read neigh ha directly which can lead to
partial reads while the neigh is being updated. Use neigh_ha_snapshot to
take a stable snapshot of the address similar to route_shortcircuit which
already does the right thing.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.